blob: 9bb497e96ed3e92d65b9c6c194e85ad9b027479d (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
|
// Copyright Yahoo. Licensed under the terms of the Apache 2.0 license. See LICENSE in the project root.
package com.yahoo.jrt;
import com.yahoo.security.tls.Capability;
import com.yahoo.security.tls.CapabilitySet;
import com.yahoo.security.tls.MissingCapabilitiesException;
/**
* @author bjorncs
*/
public class RequireCapabilitiesFilter implements RequestAccessFilter {
private final CapabilitySet requiredCapabilities;
public RequireCapabilitiesFilter(CapabilitySet requiredCapabilities) {
this.requiredCapabilities = requiredCapabilities;
}
public RequireCapabilitiesFilter(Capability... requiredCapabilities) {
this(CapabilitySet.from(requiredCapabilities));
}
@Override
public boolean allow(Request r) {
try {
r.target().connectionAuthContext()
.verifyCapabilities(requiredCapabilities, "RPC", r.methodName(), r.target().peerSpec().toString());
return true;
} catch (MissingCapabilitiesException e) {
return false;
}
}
}
|