Package ca.uhn.fhir.rest.server.interceptor

Class BanUnsupportedHttpMethodsInterceptor

java.lang.Object
ca.uhn.fhir.rest.server.interceptor.InterceptorAdapter
ca.uhn.fhir.rest.server.interceptor.BanUnsupportedHttpMethodsInterceptor
All Implemented Interfaces:
IServerInterceptor
public class BanUnsupportedHttpMethodsInterceptor extends InterceptorAdapter
This interceptor causes the server to reject invocations for HTTP methods other than those supported by the server with an HTTP 405. This is a requirement of some security assessments.

  • Constructor Details

  • Method Details

    • incomingRequestPreProcessed

      public boolean incomingRequestPreProcessed(jakarta.servlet.http.HttpServletRequest theRequest, jakarta.servlet.http.HttpServletResponse theResponse)
      Description copied from interface: IServerInterceptor
      This method is called before any other processing takes place for each incoming request. It may be used to provide alternate handling for some requests, or to screen requests before they are handled, etc.

      Note that any exceptions thrown by this method will not be trapped by HAPI (they will be passed up to the server)

      Specified by:
      incomingRequestPreProcessed in interface IServerInterceptor
      Overrides:
      incomingRequestPreProcessed in class InterceptorAdapter
      Parameters:
      theRequest - The incoming request
      theResponse - The response. Note that interceptors may choose to provide a response (i.e. by calling ServletResponse.getWriter()) but in that case it is important to return false to indicate that the server itself should not also provide a response.
      Returns:
      Return true if processing should continue normally. This is generally the right thing to do. If your interceptor is providing a response rather than letting HAPI handle the response normally, you must return false. In this case, no further processing will occur and no further interceptors will be called.