Constructor Detail

• CedarlingAdapter

  CedarlingAdapter()

Method Detail

• getCedarling

   Cedarling getCedarling()

• loadFromJson

   void loadFromJson(String bootstrapConfigJson)

• loadFromFile

   void loadFromFile(String path)

• authorizeMultiIssuer

   MultiIssuerAuthorizeResult authorizeMultiIssuer(Map<String, String> tokens, String action, JSONObject resource, JSONObject context)

  Authorize using JWT tokens from multiple issuers.

  This is the recommended replacement for the removed authorize(Map<String,String>, ...) method. Each map entry is a token mapping name (e.g. "Jans::Access_Token") to the raw JWT string.

  Parameters:

  tokens - mapping name → JWT string (must not be null; no null keys or values)

  action - Cedar action (e.g.

  resource - resource as JSONObject (must not be null)

  context - context as JSONObject (may be null; sent as empty JSON object to the engine)

  Returns:

  authorization result

• authorizeMultiIssuer

   MultiIssuerAuthorizeResult authorizeMultiIssuer(List<TokenInput> tokens, String action, JSONObject resource, JSONObject context)

  Authorize using pre-built TokenInput objects.

  Parameters:

  resource - resource as JSONObject (must not be null)

• authorizeUnsigned

   AuthorizeResult authorizeUnsigned(String principalJson, String action, JSONObject resource, JSONObject context)

  Authorize with an optional principal provided as a JSON string.

  This is the simplest way to call authorizeUnsigned without importing any UniFFI types. When principalJson is non-null it is parsed into EntityData; when null, the engine runs without an asserted principal (partial evaluation / Cedar partial mode), matching core RequestUnsigned.principal == None.

  Parameters:

  principalJson - principal as a JSON string, or null for no asserted principal

  action - Cedar action

  resource - resource as JSONObject (must not be null)

  context - context as JSONObject (may be null; sent as empty JSON object to the engine)

  Returns:

  authorization result

• authorizeUnsignedEntity

   AuthorizeResult authorizeUnsignedEntity(EntityData principal, String action, JSONObject resource, JSONObject context)

  Authorize with an optional pre-built EntityData principal.

  Use this when you already have an EntityData instance (e.g. from UniFFI or advanced integration code). Pass null for principal when no asserted principal should be supplied. A null context is sent as an empty JSON object to the engine.

  This method is named authorizeUnsignedEntity (rather than an overload of authorizeUnsigned) so that a null principal does not make overload resolution ambiguous in Java.

  Parameters:

  principal - optional principal entity, or null for partial evaluation without one

  resource - resource as JSONObject (must not be null)

• authorizeUnsignedBatchEntity

   BatchAuthorizeUnsignedResponse authorizeUnsignedBatchEntity(EntityData principal, List<BatchItem> items)

  Authorize a batch of unsigned requests against a pre-built EntityData principal.

  Setup work (principal build + pushed-data snapshot) runs once and each item is evaluated in input order. Batch-level failures (validation, principal parse) throw; per-item failures return failed outcomes containing BatchItemError, while only successful outcomes with decision=false represent Cedar Deny decisions without affecting other items.

  Named ...Entity rather than overloaded so a null principal isn't ambiguous — mirrors authorizeUnsignedEntity.

  Parameters:

  principal - optional principal entity, or null for partial evaluation

  items - list of BatchItem objects evaluated in input order

  Returns:

  response with batch_id and per-item results

• authorizeUnsignedBatch

   BatchAuthorizeUnsignedResponse authorizeUnsignedBatch(String principalJson, List<BatchItem> items)

  Authorize a batch of unsigned requests with a JSON-string principal. Parses principalJson into EntityData; pass null for partial evaluation. If you already have an EntityData, use authorizeUnsignedBatchEntity.

  Parameters:

  principalJson - principal as a JSON string, or null for no asserted principal

  items - list of BatchItem objects

• authorizeMultiIssuerBatch

   BatchAuthorizeMultiIssuerResponse authorizeMultiIssuerBatch(List<TokenInput> tokens, List<BatchItem> items)

  Authorize a batch of multi-issuer requests against one shared token set.

  Tokens are validated and token/issuer entities built once, then each item is evaluated in input order. Batch-level failures (validation, JWT verification, status-list refresh) throw; per-item failures return failed outcomes containing BatchItemError, while only successful outcomes with decision=false represent Cedar Deny decisions.

  Parameters:

  tokens - shared TokenInput list

  items - list of BatchItem objects

  Returns:

  response with batch_id and per-item results

• authorizeMultiIssuerBatch

   BatchAuthorizeMultiIssuerResponse authorizeMultiIssuerBatch(Map<String, String> tokens, List<BatchItem> items)

  Convenience overload: build the token list from a mapping-name → JWT-string Map. Same rules apply as authorizeMultiIssuer.

  Parameters:

  tokens - map of token mapping name → JWT string

  items - list of BatchItem objects

• batchItemFromJson

   BatchItem batchItemFromJson(JSONObject resource, String action, JSONObject context)

  Build a single BatchItem from JSON pieces. Convenience helper so callers can construct items without importing UniFFI types.

  Parameters:

  resource - resource as JSONObject (must not be null)

  action - Cedar action (e.g.

  context - context as JSONObject (may be null; sent as null to the engine, which defaults it to {})

• isOk

   static boolean isOk(BatchItemUnsignedOutcome outcome)

  Returns true when the batch item was evaluated by Cedar (Allow or Deny); false when it failed to build.

• unwrap

   static AuthorizeResult unwrap(BatchItemUnsignedOutcome outcome)

  Extract the AuthorizeResult from a Success outcome.

• getError

   static BatchItemError getError(BatchItemUnsignedOutcome outcome)

  Return the BatchItemError when the outcome is Failed, or null on Success.

• isOk

   static boolean isOk(BatchItemMultiIssuerOutcome outcome)

  Multi-issuer analog of isOk.

• unwrap

   static MultiIssuerAuthorizeResult unwrap(BatchItemMultiIssuerOutcome outcome)

  Multi-issuer analog of unwrap.

• getError

   static BatchItemError getError(BatchItemMultiIssuerOutcome outcome)

  Multi-issuer analog of getError.

• getLogById

   String getLogById(String id)

• getLogIds

   List<String> getLogIds()

• getLogsByRequestId

   List<String> getLogsByRequestId(String requestId)

• getLogsByRequestIdAndTag

   List<String> getLogsByRequestIdAndTag(String requestId, String tag)

• getLogsByTag

   List<String> getLogsByTag(String tag)

• popLogs

   List<String> popLogs()

• pushDataCtx

   void pushDataCtx(String key, JSONObject value, Long ttlSecs)

  Push a value into the data store with an optional TTL. If the key already exists, the value will be replaced. If TTL is not provided, the default TTL from configuration is used.

  Parameters:

  key - The key for the data entry

  value - The value to store (as JSONObject)

  ttlSecs - Optional TTL in seconds (null uses default from config)

• pushDataCtx

   void pushDataCtx(String key, String value, Long ttlSecs)

  Push a value into the data store with an optional TTL. If the key already exists, the value will be replaced. If TTL is not provided, the default TTL from configuration is used.

  Parameters:

  key - The key for the data entry

  value - The value to store (as JSON string)

  ttlSecs - Optional TTL in seconds (null uses default from config)

• pushDataCtx

   void pushDataCtx(String key, JSONObject value)

  Push a value into the data store without TTL (uses default from config).

  Parameters:

  key - The key for the data entry

  value - The value to store (as JSONObject)

• pushDataCtx

   void pushDataCtx(String key, String value)

  Push a value into the data store without TTL (uses default from config).

  Parameters:

  key - The key for the data entry

  value - The value to store (as JSON string)

• getDataCtx

   Object getDataCtx(String key)

  Get a value from the data store by key. Returns null if the key doesn't exist or the entry has expired.

  Parameters:

  key - The key to retrieve

  Returns:

  The value as an Object (JSONObject, JSONArray, String, Number, Boolean, or null), or null if not found

• getDataEntryCtx

   DataEntry getDataEntryCtx(String key)

  Get a data entry with full metadata by key. Returns null if the key doesn't exist or the entry has expired.

  Parameters:

  key - The key to retrieve

  Returns:

  A DataEntry object with metadata, or null if not found

• removeDataCtx

   boolean removeDataCtx(String key)

  Remove a value from the data store by key.

  Parameters:

  key - The key to remove

  Returns:

  True if the key existed and was removed, False otherwise

• clearDataCtx

   void clearDataCtx()

  Clear all entries from the data store.

• listDataCtx

   List<DataEntry> listDataCtx()

  List all entries with their metadata.

  Returns:

  A list of DataEntry objects

• getStatsCtx

   DataStoreStats getStatsCtx()

  Get statistics about the data store.

  Returns:

  A DataStoreStats object

• close

   void close()

• isTrustedIssuerLoadedByName

   boolean isTrustedIssuerLoadedByName(String issuerId)

• isTrustedIssuerLoadedByIss

   boolean isTrustedIssuerLoadedByIss(String issClaim)

• totalIssuers

   long totalIssuers()

• loadedTrustedIssuersCount

   long loadedTrustedIssuersCount()

• loadedTrustedIssuerIds

   List<String> loadedTrustedIssuerIds()

• failedTrustedIssuerIds

   List<String> failedTrustedIssuerIds()