Handle exception

Signed-off-by: Craig Perkins <[email protected]>
cwperks · Oct 3, 2023 · 868ec9b · 868ec9b
1 parent aa5c0fc
commit 868ec9b
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/src/main/java/org/opensearch/security/ssl/http/netty/Netty4HttpRequestHeaderVerifier.java b/src/main/java/org/opensearch/security/ssl/http/netty/Netty4HttpRequestHeaderVerifier.java
@@ -28,6 +28,9 @@
 import org.opensearch.security.support.ConfigConstants;
 import org.opensearch.security.ssl.OpenSearchSecuritySSLPlugin;
 import org.opensearch.common.settings.Settings;
+import org.opensearch.OpenSearchSecurityException;
+import org.opensearch.rest.BytesRestResponse;
+import org.opensearch.rest.RestResponse;
 
 import java.util.regex.Matcher;
 
@@ -103,6 +106,10 @@ public void channelRead0(ChannelHandlerContext ctx, DefaultHttpRequest msg) thro
             } else {
                 ctx.channel().attr(SHOULD_DECOMPRESS).set(Boolean.TRUE);
             }
+        } catch (OpenSearchSecurityException e) {
+            RestResponse earlyResponse = new BytesRestResponse(interceptingRestChannel, e);
+            ctx.channel().attr(EARLY_RESPONSE).set(earlyResponse);
+            ctx.channel().attr(SHOULD_DECOMPRESS).set(Boolean.FALSE);
         } finally {
             ctx.fireChannelRead(msg);
         }