1 files changed, 51 insertions, 0 deletions
diff --git a/node-repository/src/main/java/com/yahoo/vespa/hosted/provision/restapi/v2/filter/LocalhostFilter.java b/node-repository/src/main/java/com/yahoo/vespa/hosted/provision/restapi/v2/filter/LocalhostFilter.java
new file mode 100644
index 00000000000..00e89582dff
--- /dev/null
+++ b/node-repository/src/main/java/com/yahoo/vespa/hosted/provision/restapi/v2/filter/LocalhostFilter.java
@@ -0,0 +1,51 @@
+// Copyright 2018 Yahoo Holdings. Licensed under the terms of the Apache 2.0 license. See LICENSE in the project root.
+package com.yahoo.vespa.hosted.provision.restapi.v2.filter;
+
+import com.yahoo.jdisc.handler.FastContentWriter;
+import com.yahoo.jdisc.handler.ResponseDispatch;
+import com.yahoo.jdisc.handler.ResponseHandler;
+import com.yahoo.jdisc.http.filter.DiscFilterRequest;
+import com.yahoo.jdisc.http.filter.SecurityRequestFilter;
+import com.yahoo.vespa.hosted.provision.restapi.v2.ErrorResponse;
+
+import java.io.ByteArrayOutputStream;
+import java.io.IOException;
+import java.io.UncheckedIOException;
+
+/**
+ * A security filter that rejects requests not originating from localhost.
+ *
+ * @author mpolden
+ */
+@SuppressWarnings("unused") // Injected
+public class LocalhostFilter implements SecurityRequestFilter {
+
+    private static final String inet4Loopback = "127.0.0.1";
+    private static final String inet6Loopback = "::1";
+
+    @Override
+    public void filter(DiscFilterRequest request, ResponseHandler handler) {
+        switch (request.getRemoteAddr()) {
+            case inet4Loopback:
+            case inet6Loopback:
+                break; // Allowed
+            default:
+                write(ErrorResponse.unauthorized(String.format("%s %s denied for %s: Unauthorized host",
+                                                               request.getMethod(), request.getUri().getPath(),
+                                                               request.getRemoteAddr())), handler);
+        }
+    }
+
+    private static void write(ErrorResponse response, ResponseHandler handler) {
+        try (FastContentWriter writer = ResponseDispatch.newInstance(response.getJdiscResponse())
+                                                        .connectFastWriter(handler)) {
+            ByteArrayOutputStream out = new ByteArrayOutputStream();
+            try {
+                response.render(out);
+            } catch (IOException e) {
+                throw new UncheckedIOException(e);
+            }
+            writer.write(out.toByteArray());
+        }
+    }
+}