Ether Framework
Unified API docs for Ether modules
Loading...
Searching...
No Matches
JettySecurityHeadersHandler.java
Go to the documentation of this file.
1package dev.rafex.ether.http.jetty12;
2
3/*-
4 * #%L
5 * ether-http-jetty12
6 * %%
7 * Copyright (C) 2025 - 2026 Raúl Eduardo González Argote
8 * %%
9 * Permission is hereby granted, free of charge, to any person obtaining a copy
10 * of this software and associated documentation files (the "Software"), to deal
11 * in the Software without restriction, including without limitation the rights
12 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
13 * copies of the Software, and to permit persons to whom the Software is
14 * furnished to do so, subject to the following conditions:
15 *
16 * The above copyright notice and this permission notice shall be included in
17 * all copies or substantial portions of the Software.
18 *
19 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
20 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
21 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
22 * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
23 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
24 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
25 * THE SOFTWARE.
26 * #L%
27 */
28
29import org.eclipse.jetty.server.Handler;
30import org.eclipse.jetty.server.Request;
31import org.eclipse.jetty.server.Response;
32import org.eclipse.jetty.util.Callback;
33
34import dev.rafex.ether.http.security.headers.SecurityHeadersPolicy;
35
36final class JettySecurityHeadersHandler extends Handler.Wrapper {
37
38 private final SecurityHeadersPolicy policy;
39
40 JettySecurityHeadersHandler(final Handler next, final SecurityHeadersPolicy policy) {
41 super(next);
42 this.policy = policy;
43 }
44
45 @Override
46 public boolean handle(final Request request, final Response response, final Callback callback) throws Exception {
47 final boolean handled = super.handle(request, response, callback);
48 for (final var entry : policy.headers().entrySet()) {
49 if (response.getHeaders().get(entry.getKey()) == null) {
50 response.getHeaders().put(entry.getKey(), entry.getValue());
51 }
52 }
53 return handled;
54 }
55}
record SecurityHeadersPolicy(boolean contentTypeOptions, boolean frameOptions, boolean referrerPolicy, boolean permissionsPolicy, boolean hsts, boolean noStore, String contentSecurityPolicy, Map< String, String > customHeaders)
Política de seguridad para encabezados HTTP.