From afd75c083928c802b94293cb0cc7092b8f7e6fbf Mon Sep 17 00:00:00 2001 From: Bjørn Christian Seime Date: Tue, 9 Jan 2018 13:37:24 +0100 Subject: Add simple security filters that returns 403 forbidden --- .../restapi/filter/BlockingRequestFilter.java | 23 ++++++++++++++++++++++ 1 file changed, 23 insertions(+) create mode 100644 controller-server/src/main/java/com/yahoo/vespa/hosted/controller/restapi/filter/BlockingRequestFilter.java (limited to 'controller-server/src') diff --git a/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/restapi/filter/BlockingRequestFilter.java b/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/restapi/filter/BlockingRequestFilter.java new file mode 100644 index 00000000000..5d0a66a040e --- /dev/null +++ b/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/restapi/filter/BlockingRequestFilter.java @@ -0,0 +1,23 @@ +// Copyright 2018 Yahoo Holdings. Licensed under the terms of the Apache 2.0 license. See LICENSE in the project root. +package com.yahoo.vespa.hosted.controller.restapi.filter; + +import com.yahoo.jdisc.Response; +import com.yahoo.jdisc.handler.FastContentWriter; +import com.yahoo.jdisc.handler.ResponseDispatch; +import com.yahoo.jdisc.handler.ResponseHandler; +import com.yahoo.jdisc.http.filter.DiscFilterRequest; +import com.yahoo.jdisc.http.filter.SecurityRequestFilter; + +/** + * @author bjorncs + */ +public class BlockingRequestFilter implements SecurityRequestFilter { + + @Override + public void filter(DiscFilterRequest request, ResponseHandler handler) { + Response response = new Response(Response.Status.FORBIDDEN); + try (FastContentWriter writer = ResponseDispatch.newInstance(response).connectFastWriter(handler)) { + writer.write("Forbidden to access this API"); + } + } +} -- cgit v1.2.3