Installation

1
import com.perimeterx.api.PerimeterX;
2
import com.perimeterx.http.RequestWrapper;
3
import com.perimeterx.http.ResponseWrapper;
4
import com.perimeterx.models.PXContext;
5
import com.perimeterx.models.configuration.ModuleMode;
6
import com.perimeterx.models.configuration.PXConfiguration;
7
import com.perimeterx.models.exceptions.PXException;
8
import javax.servlet.*;
9
import javax.servlet.annotation.WebFilter;
10
import javax.servlet.http.HttpServletRequest;
11
import javax.servlet.http.HttpServletResponse;
12
import javax.servlet.http.HttpServletResponseWrapper;
13
import java.io.IOException;
14
15
@WebFilter("/*")
16
public class HumanFilter implements Filter {
17
   private PerimeterX enforcer;
18
   @Override
19
   public void init(FilterConfig filterConfig) throws ServletException {
20
         try {
21
            PXConfiguration config = PXConfiguration.builder()
22
                    .appId("<APP_ID>") // replace with your HUMAN Application ID
23
                    .cookieKey("<COOKIE_KEY>") // replace with your HUMAN Cookie Key
24
                    .authToken("<AUTH_TOKEN>") // replace with your HUMAN Server Token
25
                    .moduleMode(ModuleMode.BLOCKING)
26
                    .build();
27
            this.enforcer = new PerimeterX(config);
28
         } catch (PXException e) {
29
            throw new ServletException("Failed to initialize HUMAN Enforcer", e);
30
         }
31
   }
32
   @Override
33
   public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse,
34
                        FilterChain filterChain) throws IOException, ServletException {
35
         HttpServletRequest req = (HttpServletRequest) servletRequest;
36
         HttpServletResponse resp = (HttpServletResponse) servletResponse;
37
38
         try {
39
         // Wrap the request to allow reading the body multiple times
40
         req = new RequestWrapper(req);
41
         // Verify the request with HUMAN
42
         PXContext ctx = enforcer.pxVerify(req, new HttpServletResponseWrapper(resp));
43
  
44
         // Block or First Party
45
         if (ctx != null && ctx.isHandledResponse()) {
46
              return;
47
         }
48
  
49
         // Pass request
50
         filterChain.doFilter(req, resp);
51
          
52
         // Post-verify for login response validation (Credentials Intelligence)
53
         ResponseWrapper responseWrapper = new ResponseWrapper(resp);
54
         enforcer.pxPostVerify(responseWrapper, ctx);
55
         } catch (Exception e) {
56
            // Fail open in case of Exception
57
            filterChain.doFilter(servletRequest, servletResponse);
58
         }
59
   }
60
}