Package io.jans.fido2.service.readiness

Class BlockedAddressClassifier

java.lang.Object

io.jans.fido2.service.readiness.BlockedAddressClassifier

public final class BlockedAddressClassifier
extends Object

Says whether a resolved address is one the readiness fetcher must never connect to.

Blocked: loopback, private, link-local (which includes the 169.254.169.254 cloud metadata address), unique-local IPv6 (which includes fd00:ec2::254), multicast, carrier-grade NAT (which includes Alibaba's 100.100.100.200 metadata address), the unspecified and reserved blocks, and IPv6 forms that wrap an IPv4 address (NAT64 and 6to4), judged by the IPv4 address they wrap.

An IPv4-mapped IPv6 address (::ffff:10.0.0.1) needs no handling here: InetAddress already hands it back as an IPv4 address. Pure byte comparison; nothing is resolved.

Method Summary

Modifier and Type	Method	Description
static boolean	isBlocked(InetAddress address)	True when a connection to this address must be refused.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Details

isBlocked

public static boolean isBlocked(InetAddress address)

True when a connection to this address must be refused.