Cwikius-Spring/spring-security
1
0
Fork 0
mirror of synced 2026-08-05 17:57:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

Mono<CsrfToken> saveToken->Mono<Void>

Browse Source 
Issue: gh-4856
This commit is contained in:
Rob Winch
2017-11-20 16:25:33 -06:00
parent d55db837e1
commit 70be0f3619
4 changed files with 6 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
web/src/main/java/org/springframework/security/web/server/csrf/CsrfWebFilter.java
+1 -1
View File
@@ -123,7 +123,7 @@ public class CsrfWebFilter implements WebFilter {
private Mono<CsrfToken> generateToken(ServerWebExchange exchange) {
return this.csrfTokenRepository.generateToken(exchange)
.flatMap(token -> this.csrfTokenRepository.saveToken(exchange, token));
.delayUntil(token -> this.csrfTokenRepository.saveToken(exchange, token));
}
private static class DefaultRequireCsrfProtectionMatcher implements ServerWebExchangeMatcher {
web/src/main/java/org/springframework/security/web/server/csrf/ServerCsrfTokenRepository.java
+1 -1
View File
@@ -46,7 +46,7 @@ public interface ServerCsrfTokenRepository {
* @param exchange the {@link ServerWebExchange} to use
* @param token the {@link CsrfToken} to save or null to delete
*/
Mono<CsrfToken> saveToken(ServerWebExchange exchange, CsrfToken token);
Mono<Void> saveToken(ServerWebExchange exchange, CsrfToken token);
/**
* Loads the expected {@link CsrfToken} from the {@link ServerWebExchange}
web/src/main/java/org/springframework/security/web/server/csrf/WebSessionServerCsrfTokenRepository.java
+3 -4
View File
@@ -52,15 +52,14 @@ public class WebSessionServerCsrfTokenRepository
}
@Override
public Mono<CsrfToken> saveToken(ServerWebExchange exchange, CsrfToken token) {
public Mono<Void> saveToken(ServerWebExchange exchange, CsrfToken token) {
return exchange.getSession()
.doOnNext(session -> putToken(session.getAttributes(), token))
.flatMap(session -> session.changeSessionId())
.then(Mono.justOrEmpty(token));
.flatMap(session -> session.changeSessionId());
}
private void putToken(Map<String, Object> attributes, CsrfToken token) {
if(token == null) {
if (token == null) {
attributes.remove(this.sessionAttributeName);
} else {
attributes.put(this.sessionAttributeName, token);