Securing All Endpoints

%rest:preHook:(authMiddleware:authoriseFail2BanRest):path("/main/admin"):result($vs_authKeyResult)
  %rest:postHook:(noCaching:noCacheFunc):(htmlTextConversion:text2HTMLFunc)
  %output:method("text")
function local:admin($vs_authKeyResult) {
  let $authorized := 'Welcome to the admin page'
  let $unauthorized := 'Your IP has been logged with fail2ban'
  let $result := if ($vs_authKeyResult=true()) then $authorized else
$unauthorized
  return $result
};

%ws:preHook:(authMiddleware:authoriseFail2BanWS):connect('/'):result($vs_authKeyResult)
function local:connect($vs_authKeyResult) as empty-sequence() {
  let $id := ws:id()
  let $message := json:serialize(map {
    'type': 'Connect',
    'id': $id
  })
  return if ($vs_authKeyResult=true()) then ws:broadcast($message) else ()
};

declare
%preHook:(loggingMiddleware:functionLog):result($vs_logResult)  (:a
postHook here would be before the calling function local:admin :)
%rest:query-param("vs_authKey", " {$vs_authKey}")
function authMiddleware:authoriseFail2BanRest($vs_authKey,$vs_logResult) {
  let $result := if ($vs_authKey='YKJKhh') then true() else false()
  let $result := if ($vs_logResult='override') then true() else result()
  return $result
};

/---------------------------------
module namespace loggingMiddleware = 'http://middleware.logging';
module namespace myUpdatingOutput = 'http://function.updatingOutput';

declare
%rest:query-param("vs_logAside", " {$vs_logAside}")
function loggingMiddleware:functionLog($vs_logAside) {
  let $result := if (vs_logAside != 'adminOverride*75x4558') then
myUpdatingOutput:logwrite(request:remote-address()) else 'override'
  return $result
};

%rest:preHook:(authMiddleware:authoriseFail2BanRest:input("/main/admin",,)):path("/main/admin"):result($vs_authKeyResult)
  %rest:query-param("vbJson", " {$vbJson}")
  %if ($vbJSON = 'true') then
%rest:postHook:(noCaching:noCacheFunc):(JSONConversion:xml2JOSNFunc:input($resultdifferent))

  %output:method("xml")
function local:admin($vs_authKeyResult) {
  let $authorized := 'Welcome to the admin page'
  let $unauthorized := 'Your IP has been logged with fail2ban'
  let $resultdifferent := if ($vs_authKeyResult=true()) then
<jsonRep>{$authorized}</jsonRep> else <jsonRep>{$unauthorized}</jsonRep>{
  return <xml>{$resultdifferent/*}</xml>
};

declare
%variable $vsPath external = "/";
%rest:query-param("vs_logAside", " {$vs_logAside}")
%preHook:(loggingMiddleware:functionLog:input($vsPath,$vs_logAside)):result($vs_logResult)
 (:a postHook here would be before the calling function local:admin :)
%rest:query-param("vs_authKey", " {$vs_authKey}")
function
authMiddleware:authoriseFail2BanRest($vsPath,$vs_authKey,$vs_logResult) {
  let $result := if ($vs_authKey='YKJKhh') then true() else false()
  let $result := if ($vs_logResult='override') then true() else result()
  return $result
};

/---------------------------------
module namespace loggingMiddleware = 'http://middleware.logging';
module namespace myUpdatingOutput = 'http://function.updatingOutput';
declare
%variable $vsPath external = "/";
%variable $vs_logAside external = "/";
function loggingMiddleware:functionLog($vsPath,$vs_logAside) {
  let $result := if (vs_logAside != 'adminOverride*75x4558') then
myUpdatingOutput:logwrite($vsPath,request:remote-address()) else 'override'
  return $result
};

   let $vbFailure1 := ($perm?authorization !=  'example' or exists(
$perm?authorization )=false())

  let $vbFailure1 := ($perm?authorization !=  'example' )

<?xml version="1.0"?>
<!DOCTYPE Configure PUBLIC "-//Jetty//Configure//EN"
  "http://www.eclipse.org/jetty/configure_9_3.dtd">

<Configure id="Server" class="org.eclipse.jetty.server.Server">

    <New id="httpConfig" class="org.eclipse.jetty.server.HttpConfiguration">
        <Set name="secureScheme">https</Set>
        <Set name="securePort">8446</Set>
    </New>

    <New id="httpsConfig"
class="org.eclipse.jetty.server.HttpConfiguration">
        <Call name="addCustomizer">
            <Arg>
                <New
class="org.eclipse.jetty.server.SecureRequestCustomizer" />
            </Arg>
        </Call>
    </New>

    <New id="connector" class="org.eclipse.jetty.server.ServerConnector">
        <Arg name="server">
            <Ref refid="Server" />
        </Arg>
        <Arg name="factories">
            <Array type="org.eclipse.jetty.server.ConnectionFactory">
                <Item>
                    <New
class="org.eclipse.jetty.server.HttpConnectionFactory">
                        <Arg name="config">
                            <Ref refid="httpConfig" />
                        </Arg>
                    </New>
                </Item>
            </Array>
        </Arg>
        <Set name="host">0.0.0.0</Set>
        <Set name="port">8984</Set>
        <Set name="idleTimeout">60000</Set>
        <Set name="reuseAddress">true</Set>
    </New>

    <New id="sslContextFactory"
class="org.eclipse.jetty.util.ssl.SslContextFactory$Server">
        <Set
name="KeyStorePath">D:/D_Ser/CP_Certificates/CertifyTheWebACME.store</Set>
        <Set name="KeyStorePassword">Password</Set>
    </New>

    <New id="sslConnectionFactory"
class="org.eclipse.jetty.server.SslConnectionFactory">
        <Arg name="sslContextFactory">
            <Ref refid="sslContextFactory" />
        </Arg>
        <Arg name="next">http/1.1</Arg>
    </New>

    <New id="sslConnector" class="org.eclipse.jetty.server.ServerConnector">
        <Arg name="server">
            <Ref refid="Server" />
        </Arg>
        <Arg name="factories">
            <Array type="org.eclipse.jetty.server.ConnectionFactory">
                <Item>
                    <Ref refid="sslConnectionFactory" />
                </Item>
                <Item>
                    <New
class="org.eclipse.jetty.server.HttpConnectionFactory">
                        <Arg name="config">
                            <Ref refid="httpsConfig" />
                        </Arg>
                    </New>
                </Item>
            </Array>
        </Arg>
        <Set name="port">8446</Set>
    </New>

    <Call name="setConnectors">
        <Arg>
            <Array type="org.eclipse.jetty.server.ServerConnector">
                <Item>
                    <Ref refid="connector" />
                </Item>
                <Item>
                    <Ref refid="sslConnector" />
                </Item>
            </Array>
        </Arg>
    </Call>

    <!-- Default connector. The Jetty stop port can be specified in the
.basex or pom.xml configuration file.  -->

</Configure>

  let $vbFailure1 := not($perm?authorization =  'example')