add proxied headers to configuration

service/configuration.local.yml

@@ -15,6 +15,11 @@ startupConfiguration:
 
 digestMethod: "MD5"
 
+proxiedHeaders:
+  - "KYN_2016"
+  - "EY_HEADER"
+  - "Content-Type"
+
 admins:
   - name: "gpietrus_admin"
     password: "41b450e73c974fca46911eba84e114f2" #gpietrus md5

service/configuration.prod.yml

@@ -15,6 +15,11 @@ startupConfiguration:
 
 digestMethod: "MD5"
 
+proxiedHeaders:
+  - "KYN_2016"
+  - "EY_HEADER"
+  - "Content-Type"
+
 admins:
   - name: "gpietrus_admin"
     password: "41b450e73c974fca46911eba84e114f2" #gpietrus md5

service/src/main/java/com/telephoners/krakyournet/ctf/core/ApplicationConfiguration.java

@@ -8,6 +8,7 @@ import io.dropwizard.Configuration;
 
 import javax.validation.constraints.NotNull;
 import java.util.List;
+import java.util.Set;
 
 public class ApplicationConfiguration extends Configuration
 {
@@ -38,6 +39,9 @@ public class ApplicationConfiguration extends Configuration
     @NotNull
     private StartupConfiguration startupConfiguration;
 
+    @NotNull
+    private Set<String> proxiedHeaders;
+
     public List<User> getAdmins()
     {
         return admins;
@@ -132,4 +136,14 @@ public class ApplicationConfiguration extends Configuration
     {
         this.startupConfiguration = startupConfiguration;
     }
+
+    public Set<String> getProxiedHeaders()
+    {
+        return proxiedHeaders;
+    }
+
+    public void setProxiedHeaders(Set<String> proxiedHeaders)
+    {
+        this.proxiedHeaders = proxiedHeaders;
+    }
 }

service/src/main/java/com/telephoners/krakyournet/ctf/resources/TaskResource.java

@@ -5,6 +5,7 @@ import com.telephoners.krakyournet.ctf.beans.User;
 import com.telephoners.krakyournet.ctf.beans.tasks.Task;
 import com.telephoners.krakyournet.ctf.beans.tasks.TaskRequestContext;
 import com.telephoners.krakyournet.ctf.beans.tasks.TaskResponse;
+import com.telephoners.krakyournet.ctf.core.ApplicationConfiguration;
 import com.telephoners.krakyournet.ctf.helpers.StreamUtils;
 import com.telephoners.krakyournet.ctf.repositories.TasksRepository;
 import io.dropwizard.auth.Auth;
@@ -30,12 +31,13 @@ import java.util.stream.Collectors;
 @Path(value = "/task")
 public class TaskResource
 {
+    private final ApplicationConfiguration applicationConfiguration;
     private final TasksRepository tasksRepository;
-    private static final Set<String> PROXIED_HEADERS = Sets.newHashSet("KYN_2016", "EY_HEADER", "Content-Type"); //todo: move to conf
 
     @Inject
-    public TaskResource(TasksRepository tasksRepository)
+    public TaskResource(ApplicationConfiguration applicationConfiguration, TasksRepository tasksRepository)
     {
+        this.applicationConfiguration = applicationConfiguration;
         this.tasksRepository = tasksRepository;
     }
 
@@ -62,9 +64,10 @@ public class TaskResource
     */
 
     private Map<String, String> extractProxiedHeaders(MultivaluedMap<String, String> headers) {
+        Set<String> proxiedHeaders = applicationConfiguration.getProxiedHeaders();
         return headers.entrySet()
                 .stream()
-                .filter(header -> PROXIED_HEADERS.contains(header.getKey()))
+                .filter(header -> proxiedHeaders.contains(header.getKey()))
                 .collect(Collectors.toMap(
                         Map.Entry::getKey,
                         entry -> entry.getValue().get(0) //todo: check