How token works in struts

[kundanyasutech kundanyasutech]

Hi guys,

can anyone explain me how
isTokenValid(javax.servlet.http.HttpServletRequest request)
and
saveToken(javax.servlet.http.HttpServletRequest request)
works in struts.

Thanks,
kundan

[Marc Peabody]

When saveToken() is called, a hidden field will automatically be added to forms in your jsps (assuming you use html:form). The Struts servlet stores [in session] the most recent token.

isTokenValid() checks to see if the hidden variable submitted with the form matches the most recent one set through the saveToken method.