Package swiss.trustbroker.util

Class HeaderBuilder

java.lang.Object

swiss.trustbroker.util.HeaderBuilder

public class HeaderBuilder
extends Object

Field Summary

Fields

Modifier and Type	Field	Description
static final String	ACCESS_CONTROL_ALLOW_PRIVATE_NETWORK
static final String	ACCESS_CONTROL_PRIVATE_NETWORK
static final String	ACCESS_CONTROL_REQUEST_PRIVATE_NETWORK
static final String	CONTENT_SECURITY_POLICY
static final String	CONTENT_TYPE_OPTIONS
static final String	FRAME_OPTIONS
static final String	REFERRER_POLICY
static final String	ROBOTS_TAG
static final String	STRICT_TRANSPORT_SECURITY

Method Summary

Modifier and Type	Method	Description
HeaderBuilder	allowPrivateNetwork()
HeaderBuilder	contentTypeOptions()
HeaderBuilder	defaultCsp()
HeaderBuilder	defaultFrameOptions()
HeaderBuilder	frontendCsp()
HeaderBuilder	hsts()
static HeaderBuilder	of(jakarta.servlet.http.HttpServletRequest request, jakarta.servlet.http.HttpServletResponse response, TrustBrokerProperties properties, FrameAncestorHandler frameAncestorHandler)
HeaderBuilder	oidc3pCookieOptions(String origin, String perimeterUrl)
HeaderBuilder	oidcCspFrameOptions(Set<String> ownOrigins)
HeaderBuilder	referrerPolicy()
HeaderBuilder	robotsTag()
HeaderBuilder	samlCsp()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

STRICT_TRANSPORT_SECURITY

public static final String STRICT_TRANSPORT_SECURITY

See Also:

• Constant Field Values

REFERRER_POLICY

public static final String REFERRER_POLICY

See Also:

• Constant Field Values

ROBOTS_TAG

public static final String ROBOTS_TAG

See Also:

• Constant Field Values

FRAME_OPTIONS

public static final String FRAME_OPTIONS

See Also:

• Constant Field Values

CONTENT_SECURITY_POLICY

public static final String CONTENT_SECURITY_POLICY

See Also:

• Constant Field Values

CONTENT_TYPE_OPTIONS

public static final String CONTENT_TYPE_OPTIONS

See Also:

• Constant Field Values

ACCESS_CONTROL_REQUEST_PRIVATE_NETWORK

public static final String ACCESS_CONTROL_REQUEST_PRIVATE_NETWORK

See Also:

• Constant Field Values

ACCESS_CONTROL_ALLOW_PRIVATE_NETWORK

public static final String ACCESS_CONTROL_ALLOW_PRIVATE_NETWORK

See Also:

• Constant Field Values

ACCESS_CONTROL_PRIVATE_NETWORK

public static final String ACCESS_CONTROL_PRIVATE_NETWORK

See Also:

• Constant Field Values

Method Details

hsts

public HeaderBuilder hsts()

contentTypeOptions

public HeaderBuilder contentTypeOptions()

referrerPolicy

public HeaderBuilder referrerPolicy()

robotsTag

public HeaderBuilder robotsTag()

defaultFrameOptions

public HeaderBuilder defaultFrameOptions()

oidcCspFrameOptions

public HeaderBuilder oidcCspFrameOptions(Set<String> ownOrigins)

oidc3pCookieOptions

public HeaderBuilder oidc3pCookieOptions(String origin,
 String perimeterUrl)

defaultCsp

public HeaderBuilder defaultCsp()

samlCsp

public HeaderBuilder samlCsp()

frontendCsp

public HeaderBuilder frontendCsp()

allowPrivateNetwork

public HeaderBuilder allowPrivateNetwork()

of

public static HeaderBuilder of(jakarta.servlet.http.HttpServletRequest request,
 jakarta.servlet.http.HttpServletResponse response,
 TrustBrokerProperties properties,
 FrameAncestorHandler frameAncestorHandler)