Package org.wso2.carbon.webapp.mgt.filter

Class AuthorizationHeaderFilter

java.lang.Object
org.wso2.carbon.webapp.mgt.filter.AuthorizationHeaderFilter
All Implemented Interfaces:
javax.servlet.Filter
@WebFilter("/AuthorizationHeaderFilter") public class AuthorizationHeaderFilter extends Object implements javax.servlet.Filter
Servlet Filter implementation class for authorization header validation. This handles the NPE thrown by CXF transport exposing the stack-trace and server information to the end user for authorization headers with invalid encoded json data by sending a proper error response back to the user. If there is more than single space between auth_type and json data this will modify the header to be in correct format and pass the request along the filter chain.
Since:
4.7.6

  • Constructor Summary

    Constructors
    Constructor
    Description
    AuthorizationHeaderFilter()
     

  • Method Summary

    Modifier and Type
    Method
    Description
    void
    destroy()
    Clean up any resources being held by the filter.
    void
    doFilter(javax.servlet.ServletRequest request, javax.servlet.ServletResponse response, javax.servlet.FilterChain chain)
    Validate the authorization header.
    void
    init(javax.servlet.FilterConfig fConfig)
    Initialize AuthorizationHeaderFilter.

    Methods inherited from class java.lang.Object

    clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

  • Constructor Details

    • AuthorizationHeaderFilter

      public AuthorizationHeaderFilter()

  • Method Details

    • init

      public void init(javax.servlet.FilterConfig fConfig) throws javax.servlet.ServletException
      Initialize AuthorizationHeaderFilter.
      Specified by:
      init in interface javax.servlet.Filter
      Parameters:
      fConfig - FilterConfig
      Throws:
      javax.servlet.ServletException

    • doFilter

      public void doFilter(javax.servlet.ServletRequest request, javax.servlet.ServletResponse response, javax.servlet.FilterChain chain) throws IOException, javax.servlet.ServletException
      Validate the authorization header.
      Specified by:
      doFilter in interface javax.servlet.Filter
      Parameters:
      request - ServletRequest
      response - ServletResponse
      chain - FilterChain
      Throws:
      IOException
      javax.servlet.ServletException

    • destroy

      public void destroy()
      Clean up any resources being held by the filter.
      Specified by:
      destroy in interface javax.servlet.Filter