org.apache.wicket.core.util.crypt

Class KeyInSessionSunJceCryptFactory

java.lang.Object

org.apache.wicket.core.util.crypt.KeyInSessionSunJceCryptFactory

All Implemented Interfaces:

ICryptFactory

public class KeyInSessionSunJceCryptFactory
extends Object
implements ICryptFactory

Crypt factory that produces SunJceCrypt instances based on session-specific encryption key. This allows each user to have his own encryption key, hardening against CSRF attacks.
Note that the use of this crypt factory will result in an immediate creation of a session.

Author:

igor.vaynberg

Constructor Summary

Constructors

Constructor and Description
KeyInSessionSunJceCryptFactory() Constructor using Cipher "PBEWithMD5AndDES"
KeyInSessionSunJceCryptFactory(String cryptMethod) Constructor that uses a custom Cipher

Method Summary

Modifier and Type	Method and Description
protected ICrypt	createCrypt()
ICrypt	newCrypt()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

KeyInSessionSunJceCryptFactory

public KeyInSessionSunJceCryptFactory()

Constructor using Cipher "PBEWithMD5AndDES"

KeyInSessionSunJceCryptFactory

public KeyInSessionSunJceCryptFactory(String cryptMethod)

Constructor that uses a custom Cipher

Parameters:

cryptMethod - the name of the crypt method (cipher)

Method Detail

newCrypt

public ICrypt newCrypt()

Specified by:

newCrypt in interface ICryptFactory

Returns:

new crypt object

createCrypt

protected ICrypt createCrypt()

Returns:

the ICrypt to use