# Package net.shibboleth.idp.ui.csrf.impl

@NonnullElements package net.shibboleth.idp.ui.csrf.impl
Implementation classes for cross-site request forgery mitigation.

Related Packages
Package
Description
net.shibboleth.idp.ui.csrf
APIs relating to cross-site request forgery mitigations.
Classes
Class
Description
CSRFTokenFlowExecutionListener
A flow execution lifecycle listener that, if enabled: Sets an anti-CSRF token into the flow-scope map when a flow session starts and a token per-flow is enabled. Sets an anti-CSRF token into the view-scope map when rendering a suitable view-state.
DefaultEventRequiresCSRFTokenValidationPredicate
Default `BiPredicate` for determining if CSRF token validation should occur from a compatible request context and event.
DefaultViewRequiresCSRFTokenPredicate
Default `Predicate` for determining if a CSRF token is required for the given request context.
SimpleCSRFToken
A default, immutable, implementation of a `CSRFToken`.