org.sdase.commons.starter.builder.SecurityCustomizer Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of sda-commons-starter Show documentation

A libraries to bootstrap services easily that follow the patterns and specifications promoted by the SDA SE

There is a newer version: 7.0.87

package org.sdase.commons.starter.builder;

import io.dropwizard.core.Configuration;

public interface SecurityCustomizer {

  /**
   * Switches from suppressing the application start to a warn logging for violated buffer limits.
   * In rare cases an application might need to increase the default limits and therefore has to
   * disable strict validation. This option should be used with care.
   *
   * @return this builder instance
   */
  PlatformBundleBuilder disableBufferLimitValidationSecurityFeature();

  /**
   * If a service is configured with frontend support, the {@code Content-Security-Policy} header
   * allows the same domain as source for scripts, images, styles and fonts. Otherwise, only API
   * endpoints can be served and {@code Content-Security-Policy} does not allow any sources.
   *
   * @return this builder instance
   * @see CSP header
   */
  PlatformBundleBuilder withFrontendSupport();
}