1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
|
// Copyright Yahoo. Licensed under the terms of the Apache 2.0 license. See LICENSE in the project root.
package com.yahoo.jdisc.http.filter.util;
import com.fasterxml.jackson.core.JsonProcessingException;
import com.fasterxml.jackson.databind.ObjectMapper;
import com.fasterxml.jackson.databind.node.ObjectNode;
import com.fasterxml.jackson.databind.node.TextNode;
import com.yahoo.jdisc.Response;
import com.yahoo.jdisc.handler.ContentChannel;
import com.yahoo.jdisc.handler.ResponseHandler;
import com.yahoo.jdisc.http.Cookie;
import com.yahoo.jdisc.http.filter.DiscFilterRequest;
import com.yahoo.jdisc.http.server.jetty.RequestUtils;
import java.io.UncheckedIOException;
import java.net.URI;
import java.net.URISyntaxException;
import java.nio.ByteBuffer;
import java.util.List;
import java.util.Optional;
/**
* Helper methods for auth0/okta request filters.
*
* @author valerijf
*/
public class FilterUtils {
private static final ObjectMapper mapper = new ObjectMapper();
public static boolean isDifferentOrigin(DiscFilterRequest request) {
try {
String origin = request.getHeader("Origin");
if (origin != null && !URI.create(origin).getHost().equals(request.getServerName()))
return true;
} catch (RuntimeException ignored) { }
return false;
}
public static void sendRedirectResponse(ResponseHandler handler, List<Cookie> cookies, String location) {
Response response = createResponse(Response.Status.FOUND, cookies);
response.headers().add("Location", location);
handler.handleResponse(response).close(null);
}
public static void sendMessageResponse(ResponseHandler handler, List<Cookie> cookies, int code, String message) {
Response response = createResponse(code, cookies);
ContentChannel contentChannel = handler.handleResponse(response);
try {
ObjectNode jsonNode = mapper.createObjectNode();
jsonNode.set("message", TextNode.valueOf(message));
byte[] jsonBytes = mapper.writerWithDefaultPrettyPrinter().writeValueAsBytes(jsonNode);
contentChannel.write(ByteBuffer.wrap(jsonBytes), null);
} catch (JsonProcessingException e) {
throw new UncheckedIOException(e);
}
contentChannel.close(null);
}
private static Response createResponse(int code, List<Cookie> cookies) {
Response response = new Response(code);
List<String> setCookieHeaders = Cookie.toSetCookieHeaders(cookies);
response.headers().add("Set-Cookie", setCookieHeaders);
return response;
}
public static URI createUriFromRequest(DiscFilterRequest request, String path, Optional<String> hostOverride) {
try {
// Prefer local port as observed by client over local listen port
int port = Optional.ofNullable((Integer)request.getAttribute(RequestUtils.JDICS_REQUEST_PORT))
.orElse(request.getUri().getPort());
String host = hostOverride.orElse(request.getServerName());
return new URI(request.getScheme(), null, host, port, path, null, null);
} catch (URISyntaxException e) {
throw new RuntimeException(e);
}
}
}
|
