in src/main/java/org/apache/sling/commons/crypto/webconsole/internal/EncryptWebConsolePlugin.java [112:133]
protected void doPost(final HttpServletRequest request, final HttpServletResponse response) throws ServletException, IOException {
request.removeAttribute(ATTRIBUTE_CIPHERTEXT);
final String serviceId = request.getParameter(PARAMETER_SERVICE_ID);
final String message = request.getParameter(PARAMETER_MESSAGE); // do NOT log SECRET message
if (Objects.isNull(serviceId)) {
handleParameterMissing(response, PARAMETER_SERVICE_ID);
return;
}
if (Objects.isNull(message)) {
handleParameterMissing(response, PARAMETER_MESSAGE);
return;
}
final CryptoService cryptoService = findCryptoService(serviceId);
if (Objects.isNull(cryptoService)) {
handleCryptoServiceNotFound(response, serviceId);
return;
}
final String ciphertext = cryptoService.encrypt(message);
request.setAttribute(ATTRIBUTE_CIPHERTEXT, ciphertext);
final GetHttpServletRequestWrapper wrapper = new GetHttpServletRequestWrapper(request);
request.getRequestDispatcher(request.getRequestURI()).forward(wrapper, response);
}