Expand my Community achievements bar.

SOLVED

How to disable http methods like put,delete,options on dispatcher in aem as cloud and allow only post and get

Avatar

Level 4

Hi All,

 

Please anyone cloud help me with the fix as i am not sure how to disable these methods on dispatcher.

 

Need to disable  put,options,head,patch,delete and allow only post and get methods on dispatcher.

 

 

 

 

 

  • Regards,

 

Mahesh

1 Accepted Solution

Avatar

Correct answer by
Community Advisor

Hi @smahesh 
Please check examples : https://medium.com/@toimrank/aem-dispatcher-filter-section-a8c03a92c256 

 

/filters
{

    # Allow other URLs as needed
    /0001 { /type "deny" /url "/*" } # Deny everything else by default

    /0002 { /type "allow" /method "GET" /url "/content/*" }
    #example of POST but specify further to only allow desire url with extensions
    /0003 { /type "allow" /method "POST" /url "/content/*" } 
}


Arun Patidar

View solution in original post

5 Replies

Avatar

Correct answer by
Community Advisor

Hi @smahesh 
Please check examples : https://medium.com/@toimrank/aem-dispatcher-filter-section-a8c03a92c256 

 

/filters
{

    # Allow other URLs as needed
    /0001 { /type "deny" /url "/*" } # Deny everything else by default

    /0002 { /type "allow" /method "GET" /url "/content/*" }
    #example of POST but specify further to only allow desire url with extensions
    /0003 { /type "allow" /method "POST" /url "/content/*" } 
}


Arun Patidar

Avatar

Level 4

Thanks @arunpatidar , but how can I disable these methods from dispatcher headers ? Please let me know.

 

 

Avatar

Community Advisor

Hi @smahesh 
I did not understood the logic of using dispatcher headers to disable certain Methods? Could you please elaborate.

You can disable above from filter section

https://experienceleague.adobe.com/en/docs/experience-manager-dispatcher/using/configuring/dispatche... 

 



Arun Patidar

Avatar

Community Advisor

hi @smahesh 

 

1. Open the dispatcher.any file in a text editor.
2. Navigate to the /filter section of the file.
3. Add deny rules for PUT, DELETE, and OPTIONS methods.
- For each method, set the type to "deny" and specify the method in the rule.
4. Ensure that there are no conflicting rules that might inadvertently allow these methods.
5. Save the dispatcher.any file.
6. Restart the Dispatcher for the changes to take effect.

 

 

/filters
{
/0001 { /type "deny" /method "PUT" }
/0002 { /type "deny" /method "DELETE" }
/0003 { /type "deny" /method "OPTIONS" }
/0004 { /type "allow" /method "GET" }
/0005 { /type "allow" /method "POST" }
}

 

Avatar

Community Advisor

Hi @smahesh 


What @arunpatidar mentioned is the way to disable methods in the dispatcher. You "filter" which type of request (by method type) are allowed to pass through the dispatcher, so by setting the Rules Arun posted you are saying  Denying all requests except those GET and POST requests to the "/content" path. The headers have nothing to do with these configurations, maybe you are trying to ask something different, if so, please clarify. 

Hope this helps



Esteban Bustamante