public class InetAccessHandler extends HandlerWrapper
Controls access to the wrapped handler using the real remote IP. Control is
provided by and IncludeExcludeSet
over a InetAddressSet
. This
handler uses the real internet address of the connection, not one reported in
the forwarded for headers, as this cannot be as easily forged.
Additionally, there may be times when you want to only apply this handler to a subset of your connectors. In this situation you can use connectorNames to specify the connector names that you want this IP access filter to apply to.
AbstractHandler.ErrorDispatchHandler
AbstractLifeCycle.AbstractLifeCycleListener
LifeCycle.Listener
Container.InheritedListener, Container.Listener
Constructor and Description |
---|
InetAccessHandler() |
Modifier and Type | Method and Description |
---|---|
void |
clear()
Clears all the includes, excludes, included connector names and excluded
connector names.
|
void |
dump(Appendable out,
String indent)
Dump this object (and children) into an Appendable using the provided indent after any new lines.
|
void |
exclude(String... patterns)
Excludes InetAddress patterns
|
void |
exclude(String pattern)
Excludes an InetAddress pattern
|
void |
excludeConnector(String name)
Excludes a connector name.
|
void |
excludeConnectors(String... names)
Excludes connector names.
|
void |
handle(String target,
Request baseRequest,
HttpServletRequest request,
HttpServletResponse response)
Checks the incoming request against the whitelist and blacklist
|
void |
include(String... patterns)
Includes InetAddress patterns
|
void |
include(String pattern)
Includes an InetAddress pattern
|
void |
includeConnector(String name)
Includes a connector name.
|
void |
includeConnectors(String... names)
Includes connector names.
|
destroy, getHandler, getHandlers, insertHandler, setHandler
findContainerOf, getChildHandlerByClass, getChildHandlers, getChildHandlersByClass, setServer
getServer
addBean, addBean, addEventListener, addManaged, contains, dump, dump, dump, dump, dumpObject, dumpStdErr, getBean, getBeans, getBeans, getContainedBeans, isAuto, isManaged, isUnmanaged, manage, removeBean, removeBeans, removeEventListener, setBeans, setStopTimeout, unmanage, updateBean, updateBean, updateBeans
addLifeCycleListener, getState, getState, getStopTimeout, isFailed, isRunning, isStarted, isStarting, isStopped, isStopping, removeLifeCycleListener, start, stop, toString
equals, getClass, hashCode, notify, notifyAll, wait, wait, wait
addLifeCycleListener, isFailed, isRunning, isStarted, isStarting, isStopped, isStopping, removeLifeCycleListener, start, start, stop, stop
dumpContainer, dumpIterable, dumpMapEntries, dumpObjects, dumpSelf, named
public void clear()
public void include(String pattern)
pattern
- InetAddress pattern to includeInetAddressSet
public void include(String... patterns)
patterns
- InetAddress patterns to includeInetAddressSet
public void exclude(String pattern)
pattern
- InetAddress pattern to excludeInetAddressSet
public void exclude(String... patterns)
patterns
- InetAddress patterns to excludeInetAddressSet
public void includeConnector(String name)
name
- Connector name to include in this handler.public void excludeConnector(String name)
name
- Connector name to exclude in this handler.public void includeConnectors(String... names)
names
- Connector names to include in this handler.public void excludeConnectors(String... names)
names
- Connector names to exclude in this handler.public void handle(String target, Request baseRequest, HttpServletRequest request, HttpServletResponse response) throws IOException, ServletException
handle
in interface Handler
handle
in class HandlerWrapper
target
- The target of the request - either a URI or a name.baseRequest
- The original unwrapped request object.request
- The request either as the Request
object or a wrapper of that request. The
HttpConnection.getCurrentConnection()
.getHttpChannel()
.getRequest()
method can be used access the Request object if required.response
- The response as the Response
object or a wrapper of that request. The
HttpConnection.getCurrentConnection()
.getHttpChannel()
.getResponse()
method can be used access the Response object if required.IOException
- if unable to handle the request or response processingServletException
- if unable to handle the request or response due to underlying servlet issuepublic void dump(Appendable out, String indent) throws IOException
Dumpable
dump
in interface Dumpable
dump
in class ContainerLifeCycle
out
- The appendable to dump toindent
- The indent to apply after any new lines.IOException
- if unable to write to AppendableCopyright © 2010 - 2020 Adobe. All Rights Reserved