X-Git-Url: https://gerrit.onap.org/r/gitweb?a=blobdiff_plain;ds=sidebyside;f=datarouter-prov%2Fsrc%2Fmain%2Fjava%2Forg%2Fonap%2Fdmaap%2Fdatarouter%2Fauthz%2FAuthorizer.java;h=fb62f1922f3354d2b72e32e61a730c9e002c8420;hb=68a9ca240970fceaf12bbe91b7bad8e1d98ecd93;hp=44719e66ce4ab0e96b968795ea9e4e8afa830e9e;hpb=e4b20cc6f7c31f48ddd0de5bcd054b09a35cd510;p=dmaap%2Fdatarouter.git diff --git a/datarouter-prov/src/main/java/org/onap/dmaap/datarouter/authz/Authorizer.java b/datarouter-prov/src/main/java/org/onap/dmaap/datarouter/authz/Authorizer.java index 44719e66..fb62f192 100644 --- a/datarouter-prov/src/main/java/org/onap/dmaap/datarouter/authz/Authorizer.java +++ b/datarouter-prov/src/main/java/org/onap/dmaap/datarouter/authz/Authorizer.java @@ -7,9 +7,9 @@ * * Licensed under the Apache License, Version 2.0 (the "License"); * * you may not use this file except in compliance with the License. * * You may obtain a copy of the License at - * * + * * * * http://www.apache.org/licenses/LICENSE-2.0 - * * + * * * * Unless required by applicable law or agreed to in writing, software * * distributed under the License is distributed on an "AS IS" BASIS, * * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. @@ -31,32 +31,32 @@ import javax.servlet.http.HttpServletRequest; * A Data Router API that requires authorization of incoming requests creates an instance of a class that implements * the Authorizer interface. The class implements all of the logic necessary to determine if an API * request is permitted. In Data Router R1, the classes that implement the Authorizer interface will have - * local logic that makes the authorization decision. After R1, these classes will instead have logic that creates XACML + * local logic that makes the authorization decision. After R1,these classes will instead have logic that creates XACML * authorization requests, sends these requests to a Policy Decision Point (PDP), and parses the XACML responses. - * + * * @author J. F. Lucas * */ public interface Authorizer { - /** - * Determine if the API request carried in the request parameter is permitted. - * - * @param request the HTTP request for which an authorization decision is needed - * @return an object implementing the AuthorizationResponse interface. This object includes the - * permit/deny decision for the request and (after R1) supplemental information related to the response in the form - * of advice and obligations. - */ - public AuthorizationResponse decide(HttpServletRequest request); - - /** - * Determine if the API request carried in the request parameter, with additional attributes provided in - * the additionalAttrs parameter, is permitted. - * - * @param request the HTTP request for which an authorization decision is needed - * @param additionalAttrs additional attributes that the Authorizer can in making an authorization decision - * @return an object implementing the AuthorizationResponse interface. This object includes the - * permit/deny decision for the request and (after R1) supplemental information related to the response in the form - * of advice and obligations. - */ - public AuthorizationResponse decide(HttpServletRequest request, Map additionalAttrs); + /** + * Determine if the API request carried in the request parameter is permitted. + * + * @param request the HTTP request for which an authorization decision is needed + * @return an object implementing the AuthorizationResponse interface. This object includes the + * permit/deny decision for the request and (after R1) supplemental information related to the response in the form + * of advice and obligations. + */ + AuthorizationResponse decide(HttpServletRequest request); + + /** + * Determine if the API request carried in the request parameter,with additional attributes provided in + * the additionalAttrs parameter, is permitted. + * + * @param request the HTTP request for which an authorization decision is needed + * @param additionalAttrs additional attributes that the Authorizer can in making a decision + * @return an object implementing the AuthorizationResponse interface. This object includes the + * permit/deny decision for the request and (after R1) supplemental information related to the response + * in the form of advice and obligations. + */ + AuthorizationResponse decide(HttpServletRequest request, Map additionalAttrs); }