ePages 6.17.39 - DE_EPAGES/Presentation/API/Object/CSRFPredator.pm

Package DE_EPAGES::Presentation::API::Object::CSRFPredator

Predator against cross site request forgery

Functions

generateSecurityToken
new
validateSecurityToken

generateSecurityToken

Produces a valid security token

Syntax
$Predator->generateSecurityToken();
Return
$SecurityToken (String)
valid token

new

Create an CSRFPredator object. The three provided secrets should be unique for each shop and client.

Syntax
$Predator = DE_EPAGES::Presentation::API::Object::CSRFPredator->new(
    $UserSecret, $ServerSecret, $TimeOut
);
$Predator = DE_EPAGES::Presentation::API::Object::CSRFPredator->new(
    $UserSecret, $ServerSecret
);
Input
$UserSercret (String)
string describing user entity
$ServerSecret (String)
string describing server entity
Return
$Predator (DE_EPAGES::Presentation::API::Object::CSRFPredator)
object

validateSecurityToken

Check validity of provided token. Throws error 'INVALID_CSRF_TOKEN'.

Syntax
$Predator->validateSecurityToken($ProvidedToken);
Input
$ProvidedToken (String)
valid security token