firewall.hpp

Go to the documentation of this file.

// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
//     http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License

#ifndef __PROCESS_FIREWALL_HPP__
#define __PROCESS_FIREWALL_HPP__

#include <string>

#include <process/http.hpp>
#include <process/owned.hpp>
#include <process/socket.hpp>

#include <stout/error.hpp>
#include <stout/hashset.hpp>
#include <stout/option.hpp>

namespace process {
namespace firewall {

class FirewallRule
{
public:
  FirewallRule() {}
  virtual ~FirewallRule() {}

  virtual Option<http::Response> apply(
      const network::inet::Socket& socket,
      const http::Request& request) = 0;
};


class DisabledEndpointsFirewallRule : public FirewallRule
{
public:
  explicit DisabledEndpointsFirewallRule(const hashset<std::string>& _paths);

  ~DisabledEndpointsFirewallRule() override {}

  Option<http::Response> apply(
      const network::inet::Socket&,
      const http::Request& request) override
  {
    if (paths.contains(request.url.path)) {
      return http::Forbidden("Endpoint '" + request.url.path + "' is disabled");
    }

    return None();
  }

private:
  hashset<std::string> paths;
};

} // namespace firewall {
} // namespace process {

#endif // __PROCESS_FIREWALL_HPP__