TYPO3\CMS\Core\Middleware\RequestTokenMiddleware Class Reference

Inheritance diagram for TYPO3\CMS\Core\Middleware\RequestTokenMiddleware:

Public Member Functions
	__construct (Context $context)
	process (ServerRequestInterface $request, RequestHandlerInterface $handler)

Protected Member Functions
	resolveNoncePool (ServerRequestInterface $request)
	resolveReceivedRequestToken (ServerRequestInterface $request)
	enrichResponseWithCookie (ServerRequestInterface $request, ResponseInterface $response)
	isHttps (ServerRequestInterface $request)

Protected Attributes
const	COOKIE_PREFIX = 'typo3nonce_'
const	SECURE_PREFIX = '__Secure-'
const	ALLOWED_METHODS = ['POST', 'PUT', 'PATCH']
SecurityAspect	$securityAspect
NoncePool	$noncePool

Detailed Description

Definition at line 40 of file RequestTokenMiddleware.php.

Constructor & Destructor Documentation

__construct()

TYPO3\CMS\Core\Middleware\RequestTokenMiddleware::__construct

(

Context

$context

)

Definition at line 52 of file RequestTokenMiddleware.php.

References TYPO3\CMS\Core\Context\SecurityAspect\provideIn().

Member Function Documentation

enrichResponseWithCookie()

TYPO3\CMS\Core\Middleware\RequestTokenMiddleware::enrichResponseWithCookie ( ServerRequestInterface  $request, ResponseInterface  $response  )

protected

Definition at line 122 of file RequestTokenMiddleware.php.

References TYPO3\CMS\Core\Middleware\RequestTokenMiddleware\COOKIE_PREFIX, TYPO3\CMS\Core\Middleware\RequestTokenMiddleware\isHttps(), and TYPO3\CMS\Core\Middleware\RequestTokenMiddleware\SECURE_PREFIX.

Referenced by TYPO3\CMS\Core\Middleware\RequestTokenMiddleware\process().

isHttps()

TYPO3\CMS\Core\Middleware\RequestTokenMiddleware::isHttps ( ServerRequestInterface  $request )

protected

Definition at line 158 of file RequestTokenMiddleware.php.

References TYPO3\CMS\Core\Http\NormalizedParams\isHttps().

Referenced by TYPO3\CMS\Core\Middleware\RequestTokenMiddleware\enrichResponseWithCookie(), and TYPO3\CMS\Core\Middleware\RequestTokenMiddleware\resolveNoncePool().

process()

TYPO3\CMS\Core\Middleware\RequestTokenMiddleware::process	(	ServerRequestInterface	$request,
		RequestHandlerInterface	$handler
	)

Definition at line 58 of file RequestTokenMiddleware.php.

References TYPO3\CMS\Core\Middleware\RequestTokenMiddleware\enrichResponseWithCookie(), TYPO3\CMS\Core\Middleware\RequestTokenMiddleware\resolveNoncePool(), and TYPO3\CMS\Core\Middleware\RequestTokenMiddleware\resolveReceivedRequestToken().

resolveNoncePool()

TYPO3\CMS\Core\Middleware\RequestTokenMiddleware::resolveNoncePool ( ServerRequestInterface  $request )

protected

Definition at line 75 of file RequestTokenMiddleware.php.

References TYPO3\CMS\Core\Middleware\RequestTokenMiddleware\COOKIE_PREFIX, TYPO3\CMS\Core\Security\Nonce\fromHashSignedJwt(), TYPO3\CMS\Core\Middleware\RequestTokenMiddleware\isHttps(), and TYPO3\CMS\Core\Middleware\RequestTokenMiddleware\SECURE_PREFIX.

Referenced by TYPO3\CMS\Core\Middleware\RequestTokenMiddleware\process().

resolveReceivedRequestToken()

TYPO3\CMS\Core\Middleware\RequestTokenMiddleware::resolveReceivedRequestToken ( ServerRequestInterface  $request )

protected

Exceptions

RequestTokenException

Definition at line 105 of file RequestTokenMiddleware.php.

References TYPO3\CMS\Core\Security\RequestToken\fromHashSignedJwt(), TYPO3\CMS\Core\Security\RequestToken\HEADER_NAME, and TYPO3\CMS\Core\Security\RequestToken\PARAM_NAME.

Referenced by TYPO3\CMS\Core\Middleware\RequestTokenMiddleware\process().

Member Data Documentation

$noncePool

NoncePool TYPO3\CMS\Core\Middleware\RequestTokenMiddleware::$noncePool

protected

Definition at line 50 of file RequestTokenMiddleware.php.

$securityAspect

SecurityAspect TYPO3\CMS\Core\Middleware\RequestTokenMiddleware::$securityAspect

protected

Definition at line 49 of file RequestTokenMiddleware.php.

ALLOWED_METHODS

const TYPO3\CMS\Core\Middleware\RequestTokenMiddleware::ALLOWED_METHODS = ['POST', 'PUT', 'PATCH']

protected

Definition at line 47 of file RequestTokenMiddleware.php.

COOKIE_PREFIX

const TYPO3\CMS\Core\Middleware\RequestTokenMiddleware::COOKIE_PREFIX = 'typo3nonce_'

protected

Definition at line 44 of file RequestTokenMiddleware.php.

Referenced by TYPO3\CMS\Core\Middleware\RequestTokenMiddleware\enrichResponseWithCookie(), and TYPO3\CMS\Core\Middleware\RequestTokenMiddleware\resolveNoncePool().

SECURE_PREFIX

const TYPO3\CMS\Core\Middleware\RequestTokenMiddleware::SECURE_PREFIX = '__Secure-'

protected

Definition at line 45 of file RequestTokenMiddleware.php.

Referenced by TYPO3\CMS\Core\Middleware\RequestTokenMiddleware\enrichResponseWithCookie(), and TYPO3\CMS\Core\Middleware\RequestTokenMiddleware\resolveNoncePool().