From 97fa55d3d447098bbf605054b1ccfa08a848dc3e Mon Sep 17 00:00:00 2001 From: Olli Tietäväinen Date: Thu, 10 Aug 2017 16:07:42 +0300 Subject: Use separate identifier for push connections (#9150) By using a separate id we can avoid sending the sessions CSRF token as a GET parameter when initializing a push connection. Cherry-picked from #8700 to the 7.7 branch. --- shared/src/main/java/com/vaadin/shared/ApplicationConstants.java | 9 +++++++++ 1 file changed, 9 insertions(+) (limited to 'shared') diff --git a/shared/src/main/java/com/vaadin/shared/ApplicationConstants.java b/shared/src/main/java/com/vaadin/shared/ApplicationConstants.java index 8ce9cef2d5..2a2d4c8ccb 100644 --- a/shared/src/main/java/com/vaadin/shared/ApplicationConstants.java +++ b/shared/src/main/java/com/vaadin/shared/ApplicationConstants.java @@ -49,6 +49,8 @@ public class ApplicationConstants implements Serializable { public static final String UIDL_SECURITY_TOKEN_ID = "Vaadin-Security-Key"; + public static final String UIDL_PUSH_ID = "Vaadin-Push-ID"; + @Deprecated public static final String UPDATE_VARIABLE_INTERFACE = "v"; @Deprecated @@ -108,6 +110,13 @@ public class ApplicationConstants implements Serializable { */ public static final String CSRF_TOKEN_PARAMETER = "v-csrfToken"; + /** + * Name of the parameter used to transmit the push connection identifier. + * + * @since 7.7.11 + */ + public static final String PUSH_ID_PARAMETER = "v-pushId"; + /** * The name of the parameter used to transmit RPC invocations * -- cgit v1.2.3