Use lib-util-net for SSRF host validation

build.gradle

@@ -41,6 +41,7 @@ dependencies {
     implementation 'io.seqera:lib-retry:2.0.0'
     implementation 'io.seqera:lib-random:1.0.0'
     implementation 'io.seqera:lib-util-time:1.0.0'
+    implementation 'io.seqera:lib-util-net:0.1.0'
     implementation 'io.seqera:lib-activator:1.0.0'
     implementation project(':wave-api')
     implementation project(':wave-utils')

src/main/groovy/io/seqera/wave/controller/ValidateController.groovy

@@ -24,9 +24,11 @@ import io.micronaut.http.annotation.Controller
 import io.micronaut.http.annotation.Post
 import io.micronaut.scheduling.TaskExecutors
 import io.micronaut.scheduling.annotation.ExecuteOn
+import io.seqera.util.net.SsrfValidationException
+import io.seqera.util.net.SsrfValidator
 import io.seqera.wave.auth.RegistryAuthService
 import io.seqera.wave.configuration.SsrfConfig
-import io.seqera.wave.util.SsrfValidator
+import io.seqera.wave.exception.BadRequestException
 import jakarta.inject.Inject
 import jakarta.validation.Valid
 
@@ -54,7 +56,12 @@ class ValidateController {
 
     private void validateRegistry(String registry) {
         if (ssrfConfig.ssrfProtectionEnabled) {
-            SsrfValidator.validateHost(registry)
+            try {
+                SsrfValidator.validateHost(registry)
+            }
+            catch (SsrfValidationException e) {
+                throw new BadRequestException(e.message)
+            }
         }
     }