package cz.frantovo.nekurak.posluchac;

import javax.servlet.http.HttpSessionEvent;

import javax.servlet.http.HttpSessionListener;

/**

 *

 * @author fiki

 */

public class OchranaProtiCSRF implements HttpSessionListener {

	public static final String NAZEV_ATRIBUTU = "CSRF_TOKEN";

	@Override

	public void sessionCreated(HttpSessionEvent se) {

		String csrfToken = String.valueOf(Math.random());

		se.getSession().setAttribute(NAZEV_ATRIBUTU, csrfToken);

	}

	@Override

	public void sessionDestroyed(HttpSessionEvent se) {

	}

}