skinny.engine.csrf.CsrfTokenGenerator.scala Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of skinny-engine_2.11 Show documentation

skinny-engine

The newest version!

package skinny.engine.csrf

import java.security.SecureRandom

/**
 * CSRF token value generator.
 */
object CsrfTokenGenerator {

  def apply(): String = generateCsrfToken()

  private[this] def hexEncode(bytes: Array[Byte]): String = {
    ((new StringBuilder(bytes.length * 2) /: bytes) { (sb, b) =>
      if ((b.toInt & 0xff) < 0x10) sb.append("0")
      sb.append(Integer.toString(b.toInt & 0xff, 16))
    }).toString
  }

  protected def generateCsrfToken(): String = {
    val tokenVal = new Array[Byte](20)
    (new SecureRandom).nextBytes(tokenVal)
    hexEncode(tokenVal)
  }

}