Package io.github.open_policy_agent.opa.springboot.input

Class OPAInputValidator

java.lang.Object

io.github.open_policy_agent.opa.springboot.input.OPAInputValidator

public final class OPAInputValidator
extends Object

Makes sure that mandatory OPA input properties are available.

Field Summary

Fields

Modifier and Type	Field	Description
static final String	EXCEPTION_MESSAGE_TEMPLATE

Constructor Summary

Constructors

Constructor	Description
OPAInputValidator()

Method Summary

Modifier and Type	Method	Description
void	validate(@Nullable Authentication authentication, RequestAuthorizationContext requestAuthorizationContext, Map<String,Object> input)	Validates input Map.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

EXCEPTION_MESSAGE_TEMPLATE

public static final String EXCEPTION_MESSAGE_TEMPLATE

See Also:

• Constant Field Values

Constructor Details

OPAInputValidator

public OPAInputValidator()

Method Details

validate

public void validate(@Nullable Authentication authentication,
 RequestAuthorizationContext requestAuthorizationContext,
 Map<String,Object> input)
              throws AccessDeniedException

Validates input Map.

Parameters:

input - which will be passed to the OPA server as request body.

Throws:

AccessDeniedException - if {code input} does not contain any of these keys:

• "subject"."type"
• "subject"."id"
• "resource"."type"
• "resource"."id"
• "action"."name"
• If "context" is available, "context". "type"