http_security.hpp

浏览该文件的文档.

#ifndef NEFORCE_NETWORK_HTTP_HTTP_SECURITY_HPP__
#define NEFORCE_NETWORK_HTTP_HTTP_SECURITY_HPP__

 
#include "NeForce/network/http/http_filter.hpp"
NEFORCE_BEGIN_NAMESPACE__
NEFORCE_BEGIN_HTTP__


class NEFORCE_API security_headers_filter final : public http_filter {
public:
    bool enable_hsts = true;
    seconds hsts_max_age{31536000};      
    bool hsts_include_subdomains = true; 
    bool hsts_preload = false;           

    bool enable_frame_options = true;
    string frame_option_value{"DENY"}; 

    bool enable_content_type_options = true;

    bool enable_csp = true;
    string csp_value{"default-src 'self'"}; 

    bool enable_xss_protection = false;
    string xss_protection_value{"1; mode=block"};

    bool enable_referrer_policy = true;
    string referrer_policy_value{"strict-origin-when-cross-origin"};

    bool enable_permissions_policy = true;
    string permissions_policy_value{"geolocation=(), microphone=(), camera=()"};
 
    bool pre_filter(http_request& request, http_response& response) override { return true; }
    void post_filter(http_request& request, http_response& response) override;
    void do_filter(http_request& request, http_response& response) override {}
    NEFORCE_NODISCARD string name() const override { return "security_headers_filter"; }
};
 
// TODO: OAuth2 / OIDC authentication filter — implement Authorization Code, Client Credentials, PKCE flows with token validation
// TODO: JWT token filter — parse, validate (exp/nbf/iss/aud), and extract claims from Bearer tokens; support JWKS key rotation
// TODO: Role-based access control (RBAC) filter — @PreAuthorize-style method/route-level role & permission checking
// TODO: Password encoding utilities — BCrypt, Argon2id, PBKDF2 hashing with salt generation and constant-time verification
 // HTTP
 
NEFORCE_END_HTTP__
NEFORCE_END_NAMESPACE__
#endif // NEFORCE_NETWORK_HTTP_HTTP_SECURITY_HPP__