Enhance RProxy authorization to use request method 19/82119/1
authorIanB <IanB@amdocs.com>
Wed, 13 Mar 2019 11:15:31 +0000 (11:15 +0000)
committerIanB <IanB@amdocs.com>
Wed, 13 Mar 2019 11:30:27 +0000 (11:30 +0000)
commit94f286b3ab4da2d73f9cbdf3849aebb72c0476ea
treee3265f0606dcfd179b47bebc6fc9429b5233d8a0
parent8f1cca674c0430d0d6424778d2a720f2c9f156c7
Enhance RProxy authorization to use request method

Authorization filter now takes into account the
request method. The desired method can now be
added to the authorization file defaulting to
GET if not supplied. The request URI & method
can now be checked against the authorization
configuration along with the needed permissions.

Issue-ID: AAF-786

Change-Id: I25f6f2180ac9d94a30ca5ba1aa349fb424c18d81
Signed-off-by: IanB <IanB@amdocs.com>
sidecar/rproxy/config/auth/uri-authorization.json
sidecar/rproxy/src/main/java/org/onap/aaf/cadi/sidecar/rproxy/ReverseProxyAuthorizationFilter.java
sidecar/rproxy/src/main/java/org/onap/aaf/cadi/sidecar/rproxy/utils/ReverseProxyAuthorization.java
sidecar/rproxy/src/test/java/org/onap/aaf/cadi/sidecar/rproxy/test/PermissionMatchingTest.java