Share via


IAntiforgeryAdditionalDataProvider Interface

Definition

Allows providing or validating additional custom data for antiforgery tokens. For example, the developer could use this to supply a nonce when the token is generated, then validate it when the token is validated.

public interface class IAntiforgeryAdditionalDataProvider
public interface IAntiforgeryAdditionalDataProvider
type IAntiforgeryAdditionalDataProvider = interface
Public Interface IAntiforgeryAdditionalDataProvider

Remarks

The antiforgery system already embeds the client's username within the generated tokens. This interface provides and consumes supplemental data. If an incoming antiforgery token contains supplemental data but no additional data provider is configured, the supplemental data will not be validated.

Methods

GetAdditionalData(HttpContext)

Provides additional data to be stored for the antiforgery tokens generated during this request.

ValidateAdditionalData(HttpContext, String)

Validates additional data that was embedded inside an incoming antiforgery token.

Applies to