Package org.silverpeas.token.synchronizer

Provides an implementation of the Synchronizer Token pattern to secure user sessions or protected resources in Silverpeas by using a mechanism based upon tokens.

See:
Description

Class Summary

SynchronizerToken	A synchronizer token is for protecting a user session or a Web resource.
SynchronizerTokenGenerator	A generator of synchronizer tokens.

Package org.silverpeas.token.synchronizer Description

Provides an implementation of the Synchronizer Token pattern to secure user sessions or protected resources in Silverpeas by using a mechanism based upon tokens. For more information about Synchronizer Token, please read the following articles:

• https://www.owasp.org/index.php/Cross-Site_Request_Forgery_%28CSRF%29_Prevention_Cheat_Sheet
• http://blog.whitehatsec.com/tag/synchronizer-token/