org.apache.wicket.util.crypt
Class KeyInSessionSunJceCryptFactory

java.lang.Object
  org.apache.wicket.util.crypt.KeyInSessionSunJceCryptFactory

All Implemented Interfaces:

ICryptFactory

public class KeyInSessionSunJceCryptFactory
extends Object
implements ICryptFactory

Crypt factory that produces SunJceCrypt instances based on http session-specific encryption key. This allows each user to have their own encryption key, hardening against CSRF attacks. Note that the use of this crypt factory will result in an immediate creation of a http session

Author:

igor.vaynberg

Constructor Summary

KeyInSessionSunJceCryptFactory()

Method Summary

ICrypt

newCrypt()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

KeyInSessionSunJceCryptFactory

public KeyInSessionSunJceCryptFactory()

Method Detail

newCrypt

public ICrypt newCrypt()

Specified by:

newCrypt in interface ICryptFactory

Returns:

new crypt object