Package io.jans.as.server.service.net

Class UriService

java.lang.Object

io.jans.as.server.service.net.UriService

@Named
public class UriService
extends Object

Author:

Yuriy Z

Constructor Summary

Constructors

Constructor	Description
UriService()

Method Summary

Modifier and Type	Method	Description
boolean	isExplicitlyWhitelisted(String uri)	Unlike isExternalUriWhitelisted(String), an empty/unconfigured externalUriWhiteList means "no exception granted" here, not "no restriction" - for callers that use a whitelist match as an opt-in bypass of an otherwise fail-closed security check (e.g. private-address validation for sector_identifier_uri/client_id), where defaulting to open would be a security regression rather than a permissive convenience.
boolean	isExternalUriWhitelisted(String uri)
org.json.JSONObject	loadJson(String uri)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

UriService

public UriService()

Method Details

isExternalUriWhitelisted

public boolean isExternalUriWhitelisted(String uri)

isExplicitlyWhitelisted

public boolean isExplicitlyWhitelisted(String uri)

Unlike isExternalUriWhitelisted(String), an empty/unconfigured externalUriWhiteList means "no exception granted" here, not "no restriction" - for callers that use a whitelist match as an opt-in bypass of an otherwise fail-closed security check (e.g. private-address validation for sector_identifier_uri/client_id), where defaulting to open would be a security regression rather than a permissive convenience.

loadJson

public org.json.JSONObject loadJson(String uri)