org.apache.hadoop.hbase.rest.filter

Class RestCsrfPreventionFilter.ServletFilterHttpInteraction

java.lang.Object

org.apache.hadoop.hbase.rest.filter.RestCsrfPreventionFilter.ServletFilterHttpInteraction

All Implemented Interfaces:

RestCsrfPreventionFilter.HttpInteraction

Enclosing class:

RestCsrfPreventionFilter

private static final class RestCsrfPreventionFilter.ServletFilterHttpInteraction
extends Object
implements RestCsrfPreventionFilter.HttpInteraction

RestCsrfPreventionFilter.HttpInteraction implementation for use in the servlet filter.

Field Summary

Fields

Modifier and Type	Field and Description
private javax.servlet.FilterChain	chain
private javax.servlet.http.HttpServletRequest	httpRequest
private javax.servlet.http.HttpServletResponse	httpResponse

Constructor Summary

Constructors

Constructor and Description
ServletFilterHttpInteraction(javax.servlet.http.HttpServletRequest httpRequest, javax.servlet.http.HttpServletResponse httpResponse, javax.servlet.FilterChain chain) Creates a new ServletFilterHttpInteraction.

Method Summary

Modifier and Type	Method and Description
String	getHeader(String header) Returns the value of a header.
String	getMethod() Returns the method.
void	proceed() Called by the filter after it decides that the request may proceed.
void	sendError(int code, String message) Called by the filter after it decides that the request is a potential CSRF attack and therefore must be rejected.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

chain

private final javax.servlet.FilterChain chain

httpRequest

private final javax.servlet.http.HttpServletRequest httpRequest

httpResponse

private final javax.servlet.http.HttpServletResponse httpResponse

Constructor Detail

ServletFilterHttpInteraction

public ServletFilterHttpInteraction(javax.servlet.http.HttpServletRequest httpRequest,
                                    javax.servlet.http.HttpServletResponse httpResponse,
                                    javax.servlet.FilterChain chain)

Creates a new ServletFilterHttpInteraction.

Parameters:

httpRequest - request to process

httpResponse - response to process

chain - filter chain to forward to if HTTP interaction is allowed

Method Detail

getHeader

public String getHeader(String header)

Description copied from interface: RestCsrfPreventionFilter.HttpInteraction

Returns the value of a header.

Specified by:

getHeader in interface RestCsrfPreventionFilter.HttpInteraction

Parameters:

header - name of header

Returns:

value of header

getMethod

public String getMethod()

Description copied from interface: RestCsrfPreventionFilter.HttpInteraction

Returns the method.

Specified by:

getMethod in interface RestCsrfPreventionFilter.HttpInteraction

Returns:

method

proceed

public void proceed()
             throws IOException,
                    javax.servlet.ServletException

Description copied from interface: RestCsrfPreventionFilter.HttpInteraction

Called by the filter after it decides that the request may proceed.

Specified by:

proceed in interface RestCsrfPreventionFilter.HttpInteraction

Throws:

IOException - if there is an I/O error

javax.servlet.ServletException - if the implementation relies on the servlet API and a servlet API call has failed

sendError

public void sendError(int code,
                      String message)
               throws IOException

Description copied from interface: RestCsrfPreventionFilter.HttpInteraction

Called by the filter after it decides that the request is a potential CSRF attack and therefore must be rejected.

Specified by:

sendError in interface RestCsrfPreventionFilter.HttpInteraction

Parameters:

code - status code to send

message - response message

Throws:

IOException - if there is an I/O error