Class: ForestAdminAgent::Services::IpWhitelist

Inherits:
Object
  • Object
show all
Defined in:
lib/forest_admin_agent/services/ip_whitelist.rb

Constant Summary collapse

RULE_MATCH_IP = 
0
RULE_MATCH_RANGE = 
1
RULE_MATCH_SUBNET = 
2

Instance Attribute Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize ⇒ IpWhitelist

Returns a new instance of IpWhitelist.



12
13
14
 
# File 'lib/forest_admin_agent/services/ip_whitelist.rb', line 12

def initialize
  @forest_api = ForestAdminAgent::Http::ForestAdminApiRequester.new
end

Instance Attribute Details

#forest_api ⇒ Object (readonly)

Returns the value of attribute forest_api.



10
11
12
 
# File 'lib/forest_admin_agent/services/ip_whitelist.rb', line 10

def forest_api
  @forest_api
end

Instance Method Details

#both_loopback?(ip1, ip2) ⇒ Boolean

Returns:

  • (Boolean) 


65
66
67
 
# File 'lib/forest_admin_agent/services/ip_whitelist.rb', line 65

def both_loopback?(ip1, ip2)
  IPAddress(ip1).loopback? && IPAddress(ip2).loopback?
end

#enabled? ⇒ Boolean

Returns:

  • (Boolean) 


26
27
28
 
# File 'lib/forest_admin_agent/services/ip_whitelist.rb', line 26

def enabled?
  use_ip_whitelist && !rules.empty?
end

#ip_match_ip?(ip1, ip2) ⇒ Boolean

Returns:

  • (Boolean) 


47
48
49
50
51
52
53
54
55
 
# File 'lib/forest_admin_agent/services/ip_whitelist.rb', line 47

def ip_match_ip?(ip1, ip2)
  return both_loopback?(ip1, ip2) unless same_ip_version?(ip1, ip2)

  if ip1 == ip2
    true
  else
    both_loopback?(ip1, ip2)
  end
end

#ip_match_range?(ip, min, max) ⇒ Boolean

Returns:

  • (Boolean) 


69
70
71
72
73
74
75
76
77
 
# File 'lib/forest_admin_agent/services/ip_whitelist.rb', line 69

def ip_match_range?(ip, min, max)
  return false unless same_ip_version?(ip, min)

  ip_range_minimum = (IPAddress min)
  ip_range_maximum = (IPAddress max)
  ip_value = (IPAddress ip)

  ip_value.between?(ip_range_minimum, ip_range_maximum)
end

#ip_match_subnet?(ip, subnet) ⇒ Boolean

Returns:

  • (Boolean) 


79
80
81
82
83
 
# File 'lib/forest_admin_agent/services/ip_whitelist.rb', line 79

def ip_match_subnet?(ip, subnet)
  return false unless same_ip_version?(ip, subnet)

  IPAddress(subnet).include?(IPAddress(ip))
end

#ip_matches_any_rule?(ip) ⇒ Boolean

Returns:

  • (Boolean) 


30
31
32
 
# File 'lib/forest_admin_agent/services/ip_whitelist.rb', line 30

def ip_matches_any_rule?(ip)
  rules.any? { |rule| ip_matches_rule?(ip, rule) }
end

#ip_matches_rule?(ip, rule) ⇒ Boolean

Returns:

  • (Boolean) 


34
35
36
37
38
39
40
41
42
43
44
45
 
# File 'lib/forest_admin_agent/services/ip_whitelist.rb', line 34

def ip_matches_rule?(ip, rule)
  case rule['type']
  when RULE_MATCH_IP
    ip_match_ip?(ip, rule['ip'])
  when RULE_MATCH_RANGE
    ip_match_range?(ip, rule['ipMinimum'], rule['ipMaximum'])
  when RULE_MATCH_SUBNET
    ip_match_subnet?(ip, rule['range'])
  else
    raise ForestAdminAgent::Http::Exceptions::InternalServerError, 'Invalid rule type'
  end
end

#ip_version(ip) ⇒ Object 



61
62
63
 
# File 'lib/forest_admin_agent/services/ip_whitelist.rb', line 61

def ip_version(ip)
  (IPAddress ip).is_a?(IPAddress::IPv4) ? :ip_v4 : :ip_v6
end

#rules ⇒ Object 



21
22
23
24
 
# File 'lib/forest_admin_agent/services/ip_whitelist.rb', line 21

def rules
  fetch_rules if @rules.nil?
  @rules ||= []
end

#same_ip_version?(ip1, ip2) ⇒ Boolean

Returns:

  • (Boolean) 


57
58
59
 
# File 'lib/forest_admin_agent/services/ip_whitelist.rb', line 57

def same_ip_version?(ip1, ip2)
  ip_version(ip1) == ip_version(ip2)
end

#use_ip_whitelist ⇒ Object 



16
17
18
19
 
# File 'lib/forest_admin_agent/services/ip_whitelist.rb', line 16

def use_ip_whitelist
  fetch_rules if @use_ip_whitelist.nil?
  @use_ip_whitelist ||= false
end