Package com.atlassian.jira.web.component.admin.websudo

Class WebSudoIPAllowListManager

java.lang.Object

com.atlassian.jira.web.component.admin.websudo.WebSudoIPAllowListManager

All Implemented Interfaces:

InitializingComponent

public class WebSudoIPAllowListManager
extends Object
implements InitializingComponent

This class is used to check if the user's IP address is in the allowlist when user is trying to login for websudo. It uses Atlassian IP for matching the IP address.

Supports matching against IPv4 and IPv6 addresses, and subnets in both wildcard (IPv4 only) and CIDR notation. Examples of valid patterns:

 192.168.1.1
 192.168.1.0/24
 192.168.1.*
 0:0:0:1::1
 0:0:0:1::/64
 

Since:

9.15

Field Summary

Fields

Modifier and Type	Field	Description
static final String	REMOTE_IP_HEADER_PROPERTY
static final String	WEBSUDO_ALLOWLIST_CIDR_PROPERTY
static final String	WEBSUDO_ALLOWLIST_IP_PROPERTY
static final String	X_FORWARDED_FOR_HEADER

Constructor Summary

Constructors

Constructor	Description
WebSudoIPAllowListManager(ApplicationProperties applicationProperties)

Method Summary

Modifier and Type	Method	Description
void	afterInstantiation()	Called after all the beans are constructed and the ApplicationContext is fully populated.
IPAllowListValidationResult	isAllowed(jakarta.servlet.http.HttpServletRequest request)	Check if the user's IP address is in the allowlist.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

WEBSUDO_ALLOWLIST_IP_PROPERTY

public static final String WEBSUDO_ALLOWLIST_IP_PROPERTY

See Also:

• Constant Field Values

WEBSUDO_ALLOWLIST_CIDR_PROPERTY

public static final String WEBSUDO_ALLOWLIST_CIDR_PROPERTY

See Also:

• Constant Field Values

REMOTE_IP_HEADER_PROPERTY

public static final String REMOTE_IP_HEADER_PROPERTY

See Also:

• Constant Field Values

X_FORWARDED_FOR_HEADER

public static final String X_FORWARDED_FOR_HEADER

See Also:

• Constant Field Values

Constructor Details

WebSudoIPAllowListManager

public WebSudoIPAllowListManager(ApplicationProperties applicationProperties)

Method Details

afterInstantiation

public void afterInstantiation()
                        throws Exception

Description copied from interface: InitializingComponent

Called after all the beans are constructed and the ApplicationContext is fully populated. Order of execution is order of bean creation, driven by InitializingComponentProcessor.

Specified by:

afterInstantiation in interface InitializingComponent

Throws:

Exception

isAllowed

public IPAllowListValidationResult isAllowed(jakarta.servlet.http.HttpServletRequest request)

Check if the user's IP address is in the allowlist.

Parameters:

request - the request

Returns:

instance of IPAllowListValidationResult as validation result which returns true in IPAllowListValidationResult.isAllowed() if the user's IP address is in the allowlist, otherwise false along with the IP address for validation and the header from which the IP address is read