Java tutorial
/* * Licensed to the University Corporation for Advanced Internet Development, * Inc. (UCAID) under one or more contributor license agreements. See the * NOTICE file distributed with this work for additional information regarding * copyright ownership. The UCAID licenses this file to You under the Apache * License, Version 2.0 (the "License"); you may not use this file except in * compliance with the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ package org.opensaml.profile.logic; import java.util.ArrayList; import java.util.Collection; import java.util.Collections; import javax.annotation.Nonnull; import javax.annotation.Nullable; import javax.servlet.http.HttpServletRequest; import net.shibboleth.utilities.java.support.annotation.constraint.NonnullElements; import net.shibboleth.utilities.java.support.logic.Constraint; import net.shibboleth.utilities.java.support.net.IPRange; import org.opensaml.messaging.context.BaseContext; import com.google.common.base.Predicate; import com.google.common.base.Predicates; import com.google.common.collect.Iterables; import com.google.common.net.InetAddresses; /** * A {@link Predicate} that checks if a request is from a set of one or more {@link IPRange}s. */ public class IPRangePredicate implements Predicate<BaseContext> { /** Servlet request to evaluate. */ @Nullable private HttpServletRequest httpRequest; /** IP ranges to match against. */ @Nonnull @NonnullElements private Collection<IPRange> addressRanges; /** Constructor. */ IPRangePredicate() { addressRanges = Collections.emptyList(); } /** * Set the address ranges to check against. * * @param ranges address ranges to check against */ public void setAddressRanges(@Nonnull @NonnullElements Iterable<IPRange> ranges) { Constraint.isNotNull(ranges, "Address range collection cannot be null"); addressRanges = new ArrayList<>(); for (final IPRange range : Iterables.filter(ranges, Predicates.notNull())) { addressRanges.add(range); } } /** * Set the servlet request to evaluate. * * @param request servlet request to evaluate */ public void setHttpServletRequest(@Nonnull final HttpServletRequest request) { httpRequest = Constraint.isNotNull(request, "HttpServletRequest cannot be null"); } /** {@inheritDoc} */ @Override public boolean apply(@Nullable final BaseContext input) { String address = httpRequest != null ? httpRequest.getRemoteAddr() : null; if (address == null || !InetAddresses.isInetAddress(address)) { return false; } for (IPRange range : addressRanges) { if (range.contains(InetAddresses.forString(address))) { return true; } } return false; } }