Package swiss.trustbroker.util
Class WebSupport
java.lang.Object
swiss.trustbroker.util.WebSupport
Log-able web input (where we do not expected any StringUtil. clean modified data) and other helpers.
-
Field Summary
Fields -
Method Summary
Modifier and TypeMethodDescriptionstatic booleananyHeaderMatches(jakarta.servlet.http.HttpServletRequest httpRequest, List<swiss.trustbroker.common.config.RegexNameValue> headerConditions) static booleancanaryModeEnabled(jakarta.servlet.http.HttpServletRequest httpRequest, NetworkConfig networkConfig) static StringgetClientHint(jakarta.servlet.http.HttpServletRequest request, NetworkConfig networkConfig) static StringgetClientNetwork(jakarta.servlet.http.HttpServletRequest request, NetworkConfig networkConfig) static StringgetDeviceId(jakarta.servlet.http.HttpServletRequest request) getHttpContext(jakarta.servlet.http.HttpServletRequest request, NetworkConfig networkConfig) getOwnOrigins(TrustBrokerProperties properties) getOwnPerimeterPaths(TrustBrokerProperties properties) static StringgetRealClientNetwork(jakarta.servlet.http.HttpServletRequest request, NetworkConfig networkConfig) static <T> TgetRequestAttribute(String key, boolean tryOnly) static StringgetServiceContext(jakarta.servlet.http.HttpServletRequest request) static org.springframework.web.context.request.ServletRequestAttributesgetServletRequestAttributes(boolean tryOnly) static StringgetUniqueQueryParameter(net.shibboleth.shared.net.URLBuilder urlBuilder, String name) static StringgetUserAgent(jakarta.servlet.http.HttpServletRequest request) static Stringstatic jakarta.servlet.http.HttpServletRequeststatic booleanisAdminLogin(jakarta.servlet.http.HttpServletRequest request) static booleanisClientOnInternet(jakarta.servlet.http.HttpServletRequest request, NetworkConfig networkConfig) static booleanisClientOnIntranet(jakarta.servlet.http.HttpServletRequest request, NetworkConfig networkConfig) static booleanisInternalOidcRequest(TrustBrokerProperties properties, String referer) static booleanisLbHealthCheck(jakarta.servlet.http.HttpServletRequest request, NetworkConfig networkConfig) static booleanisOwnOrigin(TrustBrokerProperties properties, URI checkUri) static booleanpenTestingModeEnabled(jakarta.servlet.http.HttpServletRequest httpRequest, TrustBrokerProperties properties) static StringpenTestingScenario(jakarta.servlet.http.HttpServletRequest httpRequest, TrustBrokerProperties properties) static <T> voidsetRequestAttribute(String key, T value, boolean tryOnly)
-
Field Details
-
HTTP_HEADER_X_REAL_IP
- See Also:
-
HTTP_HEADER_DEVICE_ID
- See Also:
-
HTTP_HEADER_XTB_PROFILE_ID
- See Also:
-
USERNAME
- See Also:
-
HTTP_REMOTE_USER
- See Also:
-
ADMINLOGIN
- See Also:
-
COOKIE_MAXAGE_SESSION
public static final int COOKIE_MAXAGE_SESSION- See Also:
-
-
Method Details
-
getDeviceId
-
getWebRequest
public static jakarta.servlet.http.HttpServletRequest getWebRequest() -
getRealClientNetwork
public static String getRealClientNetwork(jakarta.servlet.http.HttpServletRequest request, NetworkConfig networkConfig) -
getClientNetwork
public static String getClientNetwork(jakarta.servlet.http.HttpServletRequest request, NetworkConfig networkConfig) -
getUserAgent
-
isClientOnIntranet
public static boolean isClientOnIntranet(jakarta.servlet.http.HttpServletRequest request, NetworkConfig networkConfig) -
isAdminLogin
public static boolean isAdminLogin(jakarta.servlet.http.HttpServletRequest request) -
isLbHealthCheck
public static boolean isLbHealthCheck(jakarta.servlet.http.HttpServletRequest request, NetworkConfig networkConfig) -
isClientOnInternet
public static boolean isClientOnInternet(jakarta.servlet.http.HttpServletRequest request, NetworkConfig networkConfig) -
getClientHint
public static String getClientHint(jakarta.servlet.http.HttpServletRequest request, NetworkConfig networkConfig) -
getServiceContext
-
getViewRedirectResponse
-
getHttpContext
public static Map<String,String> getHttpContext(jakarta.servlet.http.HttpServletRequest request, NetworkConfig networkConfig) -
getServletRequestAttributes
public static org.springframework.web.context.request.ServletRequestAttributes getServletRequestAttributes(boolean tryOnly) -
setRequestAttribute
-
getRequestAttribute
-
canaryModeEnabled
public static boolean canaryModeEnabled(jakarta.servlet.http.HttpServletRequest httpRequest, NetworkConfig networkConfig) -
penTestingScenario
public static String penTestingScenario(jakarta.servlet.http.HttpServletRequest httpRequest, TrustBrokerProperties properties) -
penTestingModeEnabled
public static boolean penTestingModeEnabled(jakarta.servlet.http.HttpServletRequest httpRequest, TrustBrokerProperties properties) -
anyHeaderMatches
public static boolean anyHeaderMatches(jakarta.servlet.http.HttpServletRequest httpRequest, List<swiss.trustbroker.common.config.RegexNameValue> headerConditions) - Returns:
- true if any of the request headers matches any of the headerConditions by header name and value/regex
-
getOwnOrigins
-
isOwnOrigin
-
getOwnPerimeterPaths
-
isInternalOidcRequest
-