Package org.apache.druid.server.security

Class PreResponseAuthorizationCheckFilter

java.lang.Object

org.apache.druid.server.security.PreResponseAuthorizationCheckFilter

All Implemented Interfaces:

javax.servlet.Filter

public class PreResponseAuthorizationCheckFilter
extends Object
implements javax.servlet.Filter

Filter that verifies that authorization checks were applied to an HTTP request, before sending a response.

This filter is intended to help catch missing authorization checks arising from bugs/design omissions.

Constructor Summary

Constructors

Constructor	Description
PreResponseAuthorizationCheckFilter(List<Authenticator> authenticators, com.fasterxml.jackson.databind.ObjectMapper jsonMapper)

Method Summary

Modifier and Type	Method	Description
void	destroy()
void	doFilter(javax.servlet.ServletRequest servletRequest, javax.servlet.ServletResponse servletResponse, javax.servlet.FilterChain filterChain)
void	init(javax.servlet.FilterConfig filterConfig)
static void	sendJsonError(javax.servlet.http.HttpServletResponse resp, int error, String errorJson, OutputStream outputStream)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

PreResponseAuthorizationCheckFilter

public PreResponseAuthorizationCheckFilter(List<Authenticator> authenticators,
                                           com.fasterxml.jackson.databind.ObjectMapper jsonMapper)

Method Detail

init

public void init(javax.servlet.FilterConfig filterConfig)

Specified by:

init in interface javax.servlet.Filter

doFilter

public void doFilter(javax.servlet.ServletRequest servletRequest,
                     javax.servlet.ServletResponse servletResponse,
                     javax.servlet.FilterChain filterChain)
              throws IOException,
                     javax.servlet.ServletException

Specified by:

doFilter in interface javax.servlet.Filter

Throws:

IOException

javax.servlet.ServletException

destroy

public void destroy()

Specified by:

destroy in interface javax.servlet.Filter

sendJsonError

public static void sendJsonError(javax.servlet.http.HttpServletResponse resp,
                                 int error,
                                 String errorJson,
                                 OutputStream outputStream)