org.cyclopsgroup.kaufman.servlet

Class AbstractRequestAuthorizingFilter

java.lang.Object

org.cyclopsgroup.kaufman.servlet.AbstractRequestAuthorizingFilter

All Implemented Interfaces:

javax.servlet.Filter

Direct Known Subclasses:

DomainWhitelistingFilter

public abstract class AbstractRequestAuthorizingFilter
extends Object
implements javax.servlet.Filter

A base abstract HTTP filter that verifies request before passing it to next step of chain

Constructor Summary

Constructors

Constructor and Description
AbstractRequestAuthorizingFilter()

Method Summary

Methods

Modifier and Type	Method and Description
void	doFilter(javax.servlet.ServletRequest request, javax.servlet.ServletResponse response, javax.servlet.FilterChain chain)
protected abstract boolean	isRequestAuthorized(javax.servlet.http.HttpServletRequest request) Implement concrete code logic to evaluate an HTTP request
void	setPathIgnored(Set<String> paths) Set a set of paths that bypass authorization

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface javax.servlet.Filter

destroy, init

Constructor Detail

AbstractRequestAuthorizingFilter

public AbstractRequestAuthorizingFilter()

Method Detail

doFilter

public void doFilter(javax.servlet.ServletRequest request,
            javax.servlet.ServletResponse response,
            javax.servlet.FilterChain chain)
              throws IOException,
                     javax.servlet.ServletException

Specified by:

doFilter in interface javax.servlet.Filter

Throws:

IOException

javax.servlet.ServletException

isRequestAuthorized

protected abstract boolean isRequestAuthorized(javax.servlet.http.HttpServletRequest request)
                                        throws javax.servlet.ServletException,
                                               IOException

Implement concrete code logic to evaluate an HTTP request

Parameters:

request - HTTP request to evaluate

Returns:

True if request is authorized

Throws:

javax.servlet.ServletException - Allows internal servlet exception

IOException - Allows internal IO exception

setPathIgnored

public void setPathIgnored(Set<String> paths)

Set a set of paths that bypass authorization

Parameters:

paths - Set of paths that don't require authorization