Package io.jans.as.server.authzen.ws.rs

Class AccessEvaluationService

java.lang.Object
io.jans.as.server.authzen.ws.rs.AccessEvaluationService
@ApplicationScoped public class AccessEvaluationService extends Object
AuthZEN Access Evaluation Service. Handles single and batch evaluations per AuthZEN spec.
Author:
Yuriy Z

  • Field Summary

    Fields
    Modifier and Type
    Field
    Description
    static final String
    ACCESS_EVALUATION_SCOPE
     

  • Constructor Summary

    Constructors
    Constructor
    Description
    AccessEvaluationService()
     

  • Method Summary

    Modifier and Type
    Method
    Description
    protected void
    addShortCircuitReason(io.jans.model.authzen.AccessEvaluationResponse response, String reason)
    Add short-circuit reason to response context per AuthZEN spec.
    io.jans.model.authzen.AccessEvaluationResponse
    evaluation(io.jans.model.authzen.AccessEvaluationRequest request, ExecutionContext executionContext)
    Single evaluation.
    io.jans.model.authzen.AccessEvaluationsResponse
    evaluations(io.jans.model.authzen.AccessEvaluationRequest request, ExecutionContext executionContext)
    Batch evaluations with semantic options.
    protected String
    getEvaluationsSemantic(io.jans.model.authzen.EvaluationOptions options)
    Get evaluations semantic, defaulting to execute_all.
    protected io.jans.model.authzen.AccessEvaluationRequest
    mergeWithDefaults(io.jans.model.authzen.AccessEvaluationRequest evalRequest, io.jans.model.authzen.AccessEvaluationRequest batchRequest)
    Merge individual evaluation request with defaults from batch request.
    void
    validateAuthorization(String authorization)
     

    Methods inherited from class java.lang.Object

    clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

  • Field Details

  • Constructor Details

    • AccessEvaluationService

      public AccessEvaluationService()

  • Method Details

    • evaluation

      public io.jans.model.authzen.AccessEvaluationResponse evaluation(io.jans.model.authzen.AccessEvaluationRequest request, ExecutionContext executionContext)
      Single evaluation.

    • evaluations

      public io.jans.model.authzen.AccessEvaluationsResponse evaluations(io.jans.model.authzen.AccessEvaluationRequest request, ExecutionContext executionContext)
      Batch evaluations with semantic options. Supports: execute_all, deny_on_first_deny, permit_on_first_permit

    • mergeWithDefaults

      protected io.jans.model.authzen.AccessEvaluationRequest mergeWithDefaults(io.jans.model.authzen.AccessEvaluationRequest evalRequest, io.jans.model.authzen.AccessEvaluationRequest batchRequest)
      Merge individual evaluation request with defaults from batch request.

    • getEvaluationsSemantic

      protected String getEvaluationsSemantic(io.jans.model.authzen.EvaluationOptions options)
      Get evaluations semantic, defaulting to execute_all.

    • addShortCircuitReason

      protected void addShortCircuitReason(io.jans.model.authzen.AccessEvaluationResponse response, String reason)
      Add short-circuit reason to response context per AuthZEN spec. When batch evaluation short-circuits, the last response should include context with reason indicating why processing stopped.

    • validateAuthorization

      public void validateAuthorization(String authorization)