public class ProxiedEntitiesUtils extends Object
| Modifier and Type | Field and Description |
|---|---|
private static String |
ANONYMOUS_CHAIN |
private static String |
ESCAPED_GT |
private static String |
ESCAPED_LT |
private static String |
GT |
private static org.slf4j.Logger |
logger |
private static String |
LT |
static String |
PROXY_ENTITIES_ACCEPTED |
static String |
PROXY_ENTITIES_CHAIN |
static String |
PROXY_ENTITIES_DETAILS |
| Constructor and Description |
|---|
ProxiedEntitiesUtils() |
| Modifier and Type | Method and Description |
|---|---|
static String |
formatProxyDn(String dn)
Formats the specified DN to be set as a HTTP header using well known conventions.
|
private static String |
sanitizeDn(String rawDn)
If a user provides a DN with the sequence '><', they could escape the tokenization process and impersonate another user.
|
static List<String> |
tokenizeProxiedEntitiesChain(String rawProxyChain)
Tokenizes the specified proxy chain.
|
private static String |
unsanitizeDn(String sanitizedDn)
Reconstitutes the original DN from the sanitized version passed in the proxy chain.
|
private static final org.slf4j.Logger logger
public static final String PROXY_ENTITIES_CHAIN
public static final String PROXY_ENTITIES_ACCEPTED
public static final String PROXY_ENTITIES_DETAILS
private static final String GT
private static final String ESCAPED_GT
private static final String LT
private static final String ESCAPED_LT
private static final String ANONYMOUS_CHAIN
public static String formatProxyDn(String dn)
dn - raw dnprivate static String sanitizeDn(String rawDn)
Example:
Provided DN: jdoe><alopresto -> <jdoe><alopresto><proxy...> would allow the user to impersonate jdoe
rawDn - the unsanitized DNprivate static String unsanitizeDn(String sanitizedDn)
Example:
alopresto\>\<proxy1 -> alopresto><proxy1
sanitizedDn - the sanitized DNCopyright © 2018 Apache NiFi Project. All rights reserved.