org.sdase.commons.server.opa.filter

Class OpaAuthFilter

java.lang.Object

org.sdase.commons.server.opa.filter.OpaAuthFilter

All Implemented Interfaces:

javax.ws.rs.container.ContainerRequestFilter

@Provider
 @Priority(value=2000)
public class OpaAuthFilter
extends java.lang.Object
implements javax.ws.rs.container.ContainerRequestFilter

The OpaAuthFilter sends requests to the Open Policy Agent REST API to validate the input against the policy that is configured

As default input, the following information are send:

• HTTP method (GET, POST, HEAD,...)
• the path as array of strings
• the JWT to provide user information (optional)
• the trace token to be able to trace the request within the OPA

OPA response includes at least the general access decision (true/false) and optional a list of constraints that must be considered during data projection.

Swagger URLs are excluded generally from check

The filter replaces the principal within the security context with a new OpaJwtPrincipal that might include a JWT if provided before this filter as a (JwtPrincipal.

Constructor Summary

Constructors

Constructor and Description
OpaAuthFilter(javax.ws.rs.client.WebTarget webTarget, OpaConfig config, java.util.List<java.lang.String> excludePatterns, com.fasterxml.jackson.databind.ObjectMapper om, java.util.Map<java.lang.String,OpaInputExtension<?>> inputExtensions, io.opentracing.Tracer tracer)

Method Summary

Modifier and Type	Method and Description
void	filter(javax.ws.rs.container.ContainerRequestContext requestContext)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

OpaAuthFilter

public OpaAuthFilter(javax.ws.rs.client.WebTarget webTarget,
                     OpaConfig config,
                     java.util.List<java.lang.String> excludePatterns,
                     com.fasterxml.jackson.databind.ObjectMapper om,
                     java.util.Map<java.lang.String,OpaInputExtension<?>> inputExtensions,
                     io.opentracing.Tracer tracer)

Method Detail

filter

public void filter(javax.ws.rs.container.ContainerRequestContext requestContext)

Specified by:

filter in interface javax.ws.rs.container.ContainerRequestFilter