First Party Configuration

1
public class PXFilter implements Filter {
2
3
    private PerimeterX enforcer;
4
5
    public void init(FilterConfig filterConfig) throws ServletException {
6
        try {
7
            PXConfiguration config = new PXConfiguration.Builder()
8
                    .appId("PXaBcDeFgH")
9
                    .cookieKey("COOKIE_KEY")
10
                    .authToken("AUTH_TOKEN")
11
                    .build();
12
            this.enforcer = new PerimeterX(config);
13
        } catch (PXException e) {
14
            e.printStackTrace();
15
            System.exit(1);
16
        }
17
    }
18
19
    public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain) throws IOException, ServletException {
20
        // The request wrapper enables to read the request multiple times.
21
        request = new RequestWrapper((HttpServletRequest) request);
22
     
23
        try {
24
            PXContext pxContext = this.enforcer.pxVerify((HttpServletRequest) servletRequest, new HttpServletResponseWrapper((HttpServletResponse) servletResponse));
25
26
            boolean isHandledResponse = pxContext.isHandledResponse();
27
            if (isHandledResponse) {
28
                return;
29
            }
30
31
            filterChain.doFilter(servletRequest, servletResponse);
32
33
         // This enables to read the response, it should happen after the response was already sent to the client
34
            response = new ResponseWrapper((HttpServletResponse) response);
35
         pxFilter.pxPostVerify((ResponseWrapper) response, context);
36
        } catch (Exception e) {
37
            // Fail open in case of Exception
38
            filterChain.doFilter(servletRequest, servletResponse);
39
        }
40
    }
41
42
    public void destroy() {
43
44
    }
45
}