Package io.quarkus.vertx.http.runtime

Interface TrustedProxyCheck

public interface TrustedProxyCheck

Nested Class Summary

Nested Classes

Modifier and Type	Interface	Description
static final class	TrustedProxyCheck.TrustedProxyCheckBuilder
static final class	TrustedProxyCheck.TrustedProxyCheckPart

Field Summary

Fields

Modifier and Type	Field	Description
static final TrustedProxyCheck	ALLOW_ALL
static final TrustedProxyCheck	DENY_ALL
static final org.jboss.logging.Logger	LOGGER

Method Summary

Modifier and Type	Method	Description
static BiPredicate<InetAddress,Integer>	createNewIpCheck(InetAddress trustedIP, int trustedPort)
static BiPredicate<InetAddress,Integer>	createNewIpCheck(Collection<InetAddress> trustedIP, int trustedPort)
static TrustedProxyCheck	createTrustedProxyDnCheck(io.vertx.core.http.HttpServerRequest event, List<List<Rdn>> trustedDns)
static TrustedProxyCheck	createTruststoreCheck(io.vertx.core.http.HttpServerRequest event, X509TrustManager trustManager, String alias)
boolean	isProxyAllowed()	User can configure trusted proxies for `Forwarded`, `X-Forwarded` or `X-Forwarded-*` headers.
static boolean	matchesAnyTrustedDn(X500Principal peerDn, List<List<Rdn>> trustedDns)

Field Details

LOGGER

static final org.jboss.logging.Logger LOGGER

ALLOW_ALL

static final TrustedProxyCheck ALLOW_ALL

DENY_ALL

static final TrustedProxyCheck DENY_ALL

Method Details

createTruststoreCheck

static TrustedProxyCheck createTruststoreCheck(io.vertx.core.http.HttpServerRequest event,
 X509TrustManager trustManager,
 String alias)

isProxyAllowed

boolean isProxyAllowed()

User can configure trusted proxies for `Forwarded`, `X-Forwarded` or `X-Forwarded-*` headers. Headers from untrusted proxies must be ignored.

Returns:

true if `Forwarded`, `X-Forwarded` or `X-Forwarded-*` headers were sent by trusted SocketAddress

createTrustedProxyDnCheck

static TrustedProxyCheck createTrustedProxyDnCheck(io.vertx.core.http.HttpServerRequest event,
 List<List<Rdn>> trustedDns)

matchesAnyTrustedDn

static boolean matchesAnyTrustedDn(X500Principal peerDn,
 List<List<Rdn>> trustedDns)

createNewIpCheck

static BiPredicate<InetAddress,Integer> createNewIpCheck(InetAddress trustedIP,
 int trustedPort)

createNewIpCheck

static BiPredicate<InetAddress,Integer> createNewIpCheck(Collection<InetAddress> trustedIP,
 int trustedPort)