Package org.eclipse.jetty.server

Class SecureRequestCustomizer

java.lang.Object
org.eclipse.jetty.server.SecureRequestCustomizer
All Implemented Interfaces:
HttpConfiguration.Customizer
@Deprecated(since="2021-05-27") public class SecureRequestCustomizer extends Object implements HttpConfiguration.Customizer
Deprecated.
The Eclipse Jetty and Apache Felix Http Jetty packages are no longer supported.

Customizer that extracts the attribute from an SSLContext and sets them on the request with ServletRequest.setAttribute(String, Object) according to Servlet Specification Requirements.

  • Field Details

    • JAVAX_SERVLET_REQUEST_X_509_CERTIFICATE

      public static final String JAVAX_SERVLET_REQUEST_X_509_CERTIFICATE
      Deprecated.
      See Also:

    • JAVAX_SERVLET_REQUEST_CIPHER_SUITE

      public static final String JAVAX_SERVLET_REQUEST_CIPHER_SUITE
      Deprecated.
      See Also:

    • JAVAX_SERVLET_REQUEST_KEY_SIZE

      public static final String JAVAX_SERVLET_REQUEST_KEY_SIZE
      Deprecated.
      See Also:

    • JAVAX_SERVLET_REQUEST_SSL_SESSION_ID

      public static final String JAVAX_SERVLET_REQUEST_SSL_SESSION_ID
      Deprecated.
      See Also:

  • Constructor Details

    • SecureRequestCustomizer

      public SecureRequestCustomizer()
      Deprecated.

    • SecureRequestCustomizer

      public SecureRequestCustomizer(@Name("sniHostCheck") boolean sniHostCheck)
      Deprecated.

    • SecureRequestCustomizer

      public SecureRequestCustomizer(@Name("sniHostCheck") boolean sniHostCheck, @Name("stsMaxAgeSeconds") long stsMaxAgeSeconds, @Name("stsIncludeSubdomains") boolean stsIncludeSubdomains)
      Deprecated.
      Parameters:
      sniHostCheck - True if the SNI Host name must match.
      stsMaxAgeSeconds - The max age in seconds for a Strict-Transport-Security response header. If set less than zero then no header is sent.
      stsIncludeSubdomains - If true, a include subdomain property is sent with any Strict-Transport-Security header

    • SecureRequestCustomizer

      public SecureRequestCustomizer(@Name("sniRequired") boolean sniRequired, @Name("sniHostCheck") boolean sniHostCheck, @Name("stsMaxAgeSeconds") long stsMaxAgeSeconds, @Name("stsIncludeSubdomains") boolean stsIncludeSubdomains)
      Deprecated.
      Parameters:
      sniRequired - True if a SNI certificate is required.
      sniHostCheck - True if the SNI Host name must match.
      stsMaxAgeSeconds - The max age in seconds for a Strict-Transport-Security response header. If set less than zero then no header is sent.
      stsIncludeSubdomains - If true, a include subdomain property is sent with any Strict-Transport-Security header

  • Method Details

    • isSniHostCheck

      public boolean isSniHostCheck()
      Deprecated.
      Returns:
      True if the SNI Host name must match when there is an SNI certificate.

    • setSniHostCheck

      public void setSniHostCheck(boolean sniHostCheck)
      Deprecated.
      Parameters:
      sniHostCheck - True if the SNI Host name must match when there is an SNI certificate.

    • isSniRequired

      public boolean isSniRequired()
      Deprecated.
      Returns:
      True if SNI is required, else requests will be rejected with 400 response.
      See Also:

    • setSniRequired

      public void setSniRequired(boolean sniRequired)
      Deprecated.
      Parameters:
      sniRequired - True if SNI is required, else requests will be rejected with 400 response.
      See Also:

    • getStsMaxAge

      public long getStsMaxAge()
      Deprecated.
      Returns:
      The max age in seconds for a Strict-Transport-Security response header. If set less than zero then no header is sent.

    • setStsMaxAge

      public void setStsMaxAge(long stsMaxAgeSeconds)
      Deprecated.
      Set the Strict-Transport-Security max age.
      Parameters:
      stsMaxAgeSeconds - The max age in seconds for a Strict-Transport-Security response header. If set less than zero then no header is sent.

    • setStsMaxAge

      public void setStsMaxAge(long period, TimeUnit units)
      Deprecated.
      Convenience method to call setStsMaxAge(long)
      Parameters:
      period - The period in units
      units - The TimeUnit of the period

    • isStsIncludeSubDomains

      public boolean isStsIncludeSubDomains()
      Deprecated.
      Returns:
      true if a include subdomain property is sent with any Strict-Transport-Security header

    • setStsIncludeSubDomains

      public void setStsIncludeSubDomains(boolean stsIncludeSubDomains)
      Deprecated.
      Parameters:
      stsIncludeSubDomains - If true, a include subdomain property is sent with any Strict-Transport-Security header

    • customize

      public void customize(Connector connector, HttpConfiguration channelConfig, Request request)
      Deprecated.
      Specified by:
      customize in interface HttpConfiguration.Customizer

    • setSslSessionAttribute

      public void setSslSessionAttribute(String attribute)
      Deprecated.

    • getSslSessionAttribute

      public String getSslSessionAttribute()
      Deprecated.

    • toString

      public String toString()
      Deprecated.
      Overrides:
      toString in class Object