request_user_filter

request_user_filter #

Description #

When Elasticsearch conducts authentication in Basic Auth mode, the request_user_filter is used to filter requests by request username.

Configuration Example #

A simple example is as follows:

flow:
  - name: test
    filter:
      - request_user_filter:
          include:
            - "elastic"

The above example shows that only requests from elastic are allowed to pass through.

Parameter Description #

NameTypeDescription
excludearrayList of usernames, from which requests are refused to pass through
includearrayList of usernames, from which requests are allowed to pass through
actionstringProcessing action after filtering conditions are met. The value can be set to deny or redirect_flow and the default value is deny.
statusintStatus code returned after the user-defined mode is matched
messagestringMessage text returned in user-defined deny mode
flowstringID of the flow executed in user-defined redirect_flow mode
Note: If the include condition is met, requests are allowed to pass through only when at least one response code in include is met. If only the exclude condition is met, any request that does not meet exclude is allowed to pass through.