When an API is created from the WSO2 APIM, using the publisher, the publisher will propagate the changes to the WSO2 APIM Gateway. By this it means it will create a synapse configuration on the Gateway. This synapse configuration of the API will hold a set of handlers. These handlers are placed to achieve different functionality. For e.g. the APIAuthenticationHandler is intended to validate the token. More information on the handlers can be found at [1]. The Handlers are placed in an order in the synapse configuration, and they will be executed in the order they appear. Since the first point of contact in the API is their handlers, we can use a handler to filter out the request if it is from the testing device or not.
To achieve this, we need to have an identifier being sent from the request. If we have this, it is easily possible to filter them out. First things first, we need to figure out what the identifier is. In my case, the requests sends the device ID in the header, under the parameter "Auth". So in my handler I will read the header and check for this Auth value.
How do I tell which device Id's are able to continue? For this, I will read the device Id's from a system property so that the allowed device Id's could be passed from the command line as a system property when the server is start up.
Okay, so given a brief description of what we are going to achieve, lets see how we can do this.
1. Create the Custom Handler. To create the custom handler we need to create a maven project, and create a new class. This class must be extending the "org.apache.synapse.rest.AbstractHandler". Please find the sample code below.
package org.wso2.CustomHandler; import java.util.Map; import org.apache.synapse.MessageContext; import org.apache.synapse.core.axis2.Axis2MessageContext; import org.apache.synapse.rest.AbstractHandler; public class GatewayTrafficContrlHandler extends AbstractHandler { public boolean handleRequest(MessageContext arg0) { String deviceId = null; String identifier = null; String[] identifiers; //Obtain the identifier . Map headers = (Map)((Axis2MessageContext) arg0).getAxis2MessageContext(). getProperty(org.apache.axis2.context.MessageContext.TRANSPORT_HEADERS); identifier = (String) headers.get("Auth"); if (identifier == null || identifier.isEmpty()) { //Get the first identifier which is the device ID. identifiers = identifier.split("\\|"); if (identifiers != null && identifiers.length > 0) { deviceId = identifiers[0]; } //Get the device ID list which is passed as a system property from //command line.Only these deviceId's will be allowed to pass
//through the handler. String[] supportedDeviceIdList = null; String supportedDeviceIds = System.getProperty("deviceIds"); if (supportedDeviceIds != null && !supportedDeviceIds.isEmpty()) { supportedDeviceIdList = supportedDeviceIds.split(","); } //Check if the device Id which is sent in the request is in the //list of deviuce Id's passed as a system property. if (supportedDeviceIdList != null && supportedDeviceIdList.length > 0) { for (int index = 0; index < supportedDeviceIdList.length; index++) { if (supportedDeviceIdList[index].equals(deviceId) == true) { return true; } } } } return false; } public boolean handleResponse(MessageContext arg0) { // TODO Auto-gGatewayTrafficContrlHandlerenerated method stub return false; } }
3. Copy the created Jar to the
<handlers> <handler class="org.wso2.CustomHandler.GatewayTrafficContrlHandler"/> <handler class="org.wso2.carbon.apimgt.gateway.handlers.security.APIAuthenticationHandler"/> <handler class="org.wso2.carbon.apimgt.gateway.handlers.throttling.APIThrottleHandler"> <property name="id" value="A"/> <property name="policyKey" value="gov:/apimgt/applicationdata/tiers.xml"/> </handler> <handler class="org.wso2.carbon.apimgt.usage.publisher.APIMgtUsageHandler"/> <handler class="org.wso2.carbon.apimgt.usage.publisher.APIMgtGoogleAnalyticsTrackingHandler"/> <handler class="org.wso2.carbon.apimgt.gateway.handlers.ext.APIManagerExtensionHandler"/> </handlers>
8. Once we do the change save, and observe the console for reloading of the API.
9. Test the Handler by doing a REST API call.
And that's it.
The above solution will only let the requests with deviceId's 123 or 456 or 789 to pass through.
References
[1] https://docs.wso2.com/display/AM160/Architecture#Architecture-APIHandlers
[2] https://docs.wso2.com/display/AM160/Writing+a+Custom+Authentication+Handler
