org.eclipse.jetty.server.handler

Class InetAccessHandler

java.lang.Object

org.eclipse.jetty.util.component.AbstractLifeCycle

org.eclipse.jetty.util.component.ContainerLifeCycle

org.eclipse.jetty.server.handler.AbstractHandler

org.eclipse.jetty.server.handler.AbstractHandlerContainer

org.eclipse.jetty.server.handler.HandlerWrapper

org.eclipse.jetty.server.handler.InetAccessHandler

All Implemented Interfaces:

Handler, HandlerContainer, Container, Destroyable, Dumpable, LifeCycle

public class InetAccessHandler
extends HandlerWrapper

InetAddress Access Handler

Controls access to the wrapped handler using the real remote IP. Control is provided by and IncludeExcludeSet over a InetAddressSet. This handler uses the real internet address of the connection, not one reported in the forwarded for headers, as this cannot be as easily forged.

Nested Class Summary

Nested classes/interfaces inherited from class org.eclipse.jetty.server.handler.AbstractHandler

AbstractHandler.ErrorDispatchHandler

Nested classes/interfaces inherited from class org.eclipse.jetty.util.component.AbstractLifeCycle

AbstractLifeCycle.AbstractLifeCycleListener

Nested classes/interfaces inherited from interface org.eclipse.jetty.util.component.LifeCycle

LifeCycle.Listener

Nested classes/interfaces inherited from interface org.eclipse.jetty.util.component.Container

Container.InheritedListener, Container.Listener

Field Summary

Fields

Modifier and Type	Field and Description
private IncludeExcludeSet<java.lang.String,java.net.InetAddress>	_set
private static Logger	LOG

Fields inherited from class org.eclipse.jetty.server.handler.HandlerWrapper

_handler

Fields inherited from class org.eclipse.jetty.util.component.AbstractLifeCycle

FAILED, RUNNING, STARTED, STARTING, STOP_ON_FAILURE, STOPPED, STOPPING

Constructor Summary

Constructors

Constructor and Description
InetAccessHandler()

Method Summary

Modifier and Type	Method and Description
void	dump(java.lang.Appendable out, java.lang.String indent)
void	exclude(java.lang.String... patterns) Excludes InetAddress patterns
void	exclude(java.lang.String pattern) Excludes an InetAddress pattern
void	handle(java.lang.String target, Request baseRequest, javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response) Checks the incoming request against the whitelist and blacklist
void	include(java.lang.String... patterns) Includes InetAddress patterns
void	include(java.lang.String pattern) Includes an InetAddress pattern
protected boolean	isAllowed(java.net.InetAddress address, javax.servlet.http.HttpServletRequest request) Checks if specified address and request are allowed by current InetAddress rules.

Methods inherited from class org.eclipse.jetty.server.handler.HandlerWrapper

destroy, expandChildren, getHandler, getHandlers, insertHandler, setHandler

Methods inherited from class org.eclipse.jetty.server.handler.AbstractHandlerContainer

expandHandler, findContainerOf, getChildHandlerByClass, getChildHandlers, getChildHandlersByClass, setServer

Methods inherited from class org.eclipse.jetty.server.handler.AbstractHandler

doError, doStart, doStop, dumpThis, getServer

Methods inherited from class org.eclipse.jetty.util.component.ContainerLifeCycle

addBean, addBean, addBean, addEventListener, addManaged, contains, dump, dump, dump, dump, dumpBeans, dumpObject, dumpStdErr, getBean, getBeans, getBeans, getContainedBeans, getContainedBeans, isManaged, manage, removeBean, removeBeans, removeEventListener, setBeans, setStopTimeout, start, stop, unmanage, updateBean, updateBean, updateBeans

Methods inherited from class org.eclipse.jetty.util.component.AbstractLifeCycle

addLifeCycleListener, getState, getState, getStopTimeout, isFailed, isRunning, isStarted, isStarting, isStopped, isStopping, removeLifeCycleListener, start, stop

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.eclipse.jetty.util.component.LifeCycle

addLifeCycleListener, isFailed, isRunning, isStarted, isStarting, isStopped, isStopping, removeLifeCycleListener, start, start, stop, stop

Field Detail

LOG

private static final Logger LOG

_set

private final IncludeExcludeSet<java.lang.String,java.net.InetAddress> _set

Constructor Detail

InetAccessHandler

public InetAccessHandler()

Method Detail

include

public void include(java.lang.String pattern)

Includes an InetAddress pattern

Parameters:

pattern - InetAddress pattern to include

See Also:

InetAddressSet

include

public void include(java.lang.String... patterns)

Includes InetAddress patterns

Parameters:

patterns - InetAddress patterns to include

See Also:

InetAddressSet

exclude

public void exclude(java.lang.String pattern)

Excludes an InetAddress pattern

Parameters:

pattern - InetAddress pattern to exclude

See Also:

InetAddressSet

exclude

public void exclude(java.lang.String... patterns)

Excludes InetAddress patterns

Parameters:

patterns - InetAddress patterns to exclude

See Also:

InetAddressSet

handle

public void handle(java.lang.String target,
                   Request baseRequest,
                   javax.servlet.http.HttpServletRequest request,
                   javax.servlet.http.HttpServletResponse response)
            throws java.io.IOException,
                   javax.servlet.ServletException

Checks the incoming request against the whitelist and blacklist

Specified by:

handle in interface Handler

Overrides:

handle in class HandlerWrapper

Parameters:

target - The target of the request - either a URI or a name.

baseRequest - The original unwrapped request object.

request - The request either as the Request object or a wrapper of that request. The HttpConnection.getCurrentConnection().getHttpChannel().getRequest() method can be used access the Request object if required.

response - The response as the Response object or a wrapper of that request. The HttpConnection.getCurrentConnection().getHttpChannel().getResponse() method can be used access the Response object if required.

Throws:

java.io.IOException - if unable to handle the request or response processing

javax.servlet.ServletException - if unable to handle the request or response due to underlying servlet issue

isAllowed

protected boolean isAllowed(java.net.InetAddress address,
                            javax.servlet.http.HttpServletRequest request)

Checks if specified address and request are allowed by current InetAddress rules.

Parameters:

address - the inetAddress to check

request - the request to check

Returns:

true if inetAddress and request are allowed

dump

public void dump(java.lang.Appendable out,
                 java.lang.String indent)
          throws java.io.IOException

Specified by:

dump in interface Dumpable

Overrides:

dump in class ContainerLifeCycle

Throws:

java.io.IOException