org.eclipse.jetty.server.handler

Class InetAccessHandler

java.lang.Object

ContainerLifeCycle

org.eclipse.jetty.server.handler.AbstractHandler

org.eclipse.jetty.server.handler.AbstractHandlerContainer

org.eclipse.jetty.server.handler.HandlerWrapper

org.eclipse.jetty.server.handler.InetAccessHandler

All Implemented Interfaces:

Handler, HandlerContainer

public class InetAccessHandler
extends HandlerWrapper

InetAddress Access Handler

Controls access to the wrapped handler using the real remote IP. Control is provided by and IncludeExcludeSet over a InetAddressSet. This handler uses the real internet address of the connection, not one reported in the forwarded for headers, as this cannot be as easily forged.

Nested Class Summary

Nested classes/interfaces inherited from class org.eclipse.jetty.server.handler.AbstractHandler

AbstractHandler.ErrorDispatchHandler

Field Summary

Fields inherited from class org.eclipse.jetty.server.handler.HandlerWrapper

_handler

Constructor Summary

Constructors

Constructor and Description
InetAccessHandler()

Method Summary

Modifier and Type	Method and Description
void	dump(java.lang.Appendable out, java.lang.String indent)
void	exclude(java.lang.String... patterns) Excludes InetAddress patterns
void	exclude(java.lang.String pattern) Excludes an InetAddress pattern
void	handle(java.lang.String target, Request baseRequest, HttpServletRequest request, HttpServletResponse response) Checks the incoming request against the whitelist and blacklist
void	include(java.lang.String... patterns) Includes InetAddress patterns
void	include(java.lang.String pattern) Includes an InetAddress pattern
protected boolean	isAllowed(java.net.InetAddress address, HttpServletRequest request) Checks if specified address and request are allowed by current InetAddress rules.

Methods inherited from class org.eclipse.jetty.server.handler.HandlerWrapper

destroy, expandChildren, getHandler, getHandlers, insertHandler, setHandler

Methods inherited from class org.eclipse.jetty.server.handler.AbstractHandlerContainer

expandHandler, findContainerOf, getChildHandlerByClass, getChildHandlers, getChildHandlersByClass, setServer

Methods inherited from class org.eclipse.jetty.server.handler.AbstractHandler

doError, doStart, doStop, dumpThis, getServer

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

InetAccessHandler

public InetAccessHandler()

Method Detail

include

public void include(java.lang.String pattern)

Includes an InetAddress pattern

Parameters:

pattern - InetAddress pattern to include

See Also:

InetAddressSet

include

public void include(java.lang.String... patterns)

Includes InetAddress patterns

Parameters:

patterns - InetAddress patterns to include

See Also:

InetAddressSet

exclude

public void exclude(java.lang.String pattern)

Excludes an InetAddress pattern

Parameters:

pattern - InetAddress pattern to exclude

See Also:

InetAddressSet

exclude

public void exclude(java.lang.String... patterns)

Excludes InetAddress patterns

Parameters:

patterns - InetAddress patterns to exclude

See Also:

InetAddressSet

handle

public void handle(java.lang.String target,
                   Request baseRequest,
                   HttpServletRequest request,
                   HttpServletResponse response)
            throws java.io.IOException,
                   ServletException

Checks the incoming request against the whitelist and blacklist

Specified by:

handle in interface Handler

Overrides:

handle in class HandlerWrapper

Parameters:

target - The target of the request - either a URI or a name.

baseRequest - The original unwrapped request object.

request - The request either as the Request object or a wrapper of that request. The HttpConnection.getCurrentConnection().getHttpChannel().getRequest() method can be used access the Request object if required.

response - The response as the Response object or a wrapper of that request. The HttpConnection.getCurrentConnection().getHttpChannel().getResponse() method can be used access the Response object if required.

Throws:

java.io.IOException - if unable to handle the request or response processing

ServletException - if unable to handle the request or response due to underlying servlet issue

isAllowed

protected boolean isAllowed(java.net.InetAddress address,
                            HttpServletRequest request)

Checks if specified address and request are allowed by current InetAddress rules.

Parameters:

address - the inetAddress to check

request - the request to check

Returns:

true if inetAddress and request are allowed

dump

public void dump(java.lang.Appendable out,
                 java.lang.String indent)
          throws java.io.IOException

Throws:

java.io.IOException