request_user_filter #
Description #
When Elasticsearch conducts authentication in Basic Auth mode, the request_user_filter is used to filter requests by request username.
Configuration Example #
A simple example is as follows:
flow:
- name: test
filter:
- request_user_filter:
include:
- "elastic"
The above example shows that only requests from elastic
are allowed to pass through.
Parameter Description #
Name | Type | Description |
---|---|---|
exclude | array | List of usernames, from which requests are refused to pass through |
include | array | List of usernames, from which requests are allowed to pass through |
action | string | Processing action after filtering conditions are met. The value can be set to deny or redirect_flow and the default value is deny . |
status | int | Status code returned after the user-defined mode is matched |
message | string | Message text returned in user-defined deny mode |
flow | string | ID of the flow executed in user-defined redirect_flow mode |
Note: If theinclude
condition is met, requests are allowed to pass through only when at least one response code ininclude
is met. If only theexclude
condition is met, any request that does not meetexclude
is allowed to pass through.