org.springframework.web.socket.server.support

Class OriginHandshakeInterceptor

java.lang.Object

org.springframework.web.socket.server.support.OriginHandshakeInterceptor

All Implemented Interfaces:

HandshakeInterceptor

public class OriginHandshakeInterceptor
extends Object
implements HandshakeInterceptor

An interceptor to check request Origin header value against a collection of allowed origins.

Since:

4.1.2

Author:

Sebastien Deleuze

Field Summary

Fields

Modifier and Type	Field and Description
protected Log	logger

Constructor Summary

Constructors

Constructor and Description
OriginHandshakeInterceptor() Default constructor with no origin allowed.

Method Summary

Modifier and Type	Method and Description
void	afterHandshake(org.springframework.http.server.ServerHttpRequest request, org.springframework.http.server.ServerHttpResponse response, WebSocketHandler wsHandler, Exception exception) Invoked after the handshake is done.
boolean	beforeHandshake(org.springframework.http.server.ServerHttpRequest request, org.springframework.http.server.ServerHttpResponse response, WebSocketHandler wsHandler, Map<String,Object> attributes) Invoked before the handshake is processed.
protected boolean	isValidOrigin(org.springframework.http.server.ServerHttpRequest request)
void	setAllowedOrigins(Collection<String> allowedOrigins) Use this property to define a collection of allowed origins.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

logger

protected Log logger

Constructor Detail

OriginHandshakeInterceptor

public OriginHandshakeInterceptor()

Default constructor with no origin allowed.

Method Detail

setAllowedOrigins

public void setAllowedOrigins(Collection<String> allowedOrigins)

Use this property to define a collection of allowed origins.

beforeHandshake

public boolean beforeHandshake(org.springframework.http.server.ServerHttpRequest request,
                               org.springframework.http.server.ServerHttpResponse response,
                               WebSocketHandler wsHandler,
                               Map<String,Object> attributes)
                        throws Exception

Description copied from interface: HandshakeInterceptor

Invoked before the handshake is processed.

Specified by:

beforeHandshake in interface HandshakeInterceptor

Parameters:

request - the current request

response - the current response

wsHandler - the target WebSocket handler

attributes - attributes from the HTTP handshake to associate with the WebSocket session; the provided attributes are copied, the original map is not used.

Returns:

whether to proceed with the handshake (true) or abort (false)

Throws:

Exception

isValidOrigin

protected boolean isValidOrigin(org.springframework.http.server.ServerHttpRequest request)

afterHandshake

public void afterHandshake(org.springframework.http.server.ServerHttpRequest request,
                           org.springframework.http.server.ServerHttpResponse response,
                           WebSocketHandler wsHandler,
                           Exception exception)

Description copied from interface: HandshakeInterceptor

Invoked after the handshake is done. The response status and headers indicate the results of the handshake, i.e. whether it was successful or not.

Specified by:

afterHandshake in interface HandshakeInterceptor

Parameters:

request - the current request

response - the current response

wsHandler - the target WebSocket handler

exception - an exception raised during the handshake, or null if none