-
Notifications
You must be signed in to change notification settings - Fork 22
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Fix isAuthorizedPartial due to rust interface changes
Signed-off-by: Mohamed Amine Ouali <mdamine@amazon.com>
- Loading branch information
1 parent
0c95d73
commit a4adebf
Showing
6 changed files
with
228 additions
and
130 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
159 changes: 159 additions & 0 deletions
159
CedarJava/src/main/java/com/cedarpolicy/model/PartialAuthorizationSuccessResponse.java
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,159 @@ | ||
| /* | ||
| * Copyright Cedar Contributors | ||
| * | ||
| * Licensed under the Apache License, Version 2.0 (the "License"); | ||
| * you may not use this file except in compliance with the License. | ||
| * You may obtain a copy of the License at | ||
| * | ||
| * https://www.apache.org/licenses/LICENSE-2.0 | ||
| * | ||
| * Unless required by applicable law or agreed to in writing, software | ||
| * distributed under the License is distributed on an "AS IS" BASIS, | ||
| * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | ||
| * See the License for the specific language governing permissions and | ||
| * limitations under the License. | ||
| */ | ||
|
|
||
| package com.cedarpolicy.model; | ||
|
|
||
| import java.util.Map; | ||
| import java.util.Set; | ||
|
|
||
| import com.cedarpolicy.Experimental; | ||
| import com.cedarpolicy.ExperimentalFeature; | ||
| import com.fasterxml.jackson.annotation.JsonCreator; | ||
| import com.fasterxml.jackson.annotation.JsonProperty; | ||
| import com.fasterxml.jackson.databind.JsonNode; | ||
| import com.google.common.collect.ImmutableMap; | ||
| import com.google.common.collect.ImmutableSet; | ||
|
|
||
| /** | ||
| * Successful partial authorization response | ||
| */ | ||
| @Experimental(ExperimentalFeature.PARTIAL_EVALUATION) | ||
| public final class PartialAuthorizationSuccessResponse { | ||
| private final AuthorizationSuccessResponse.Decision decision; | ||
| private final ImmutableSet<String> satisfied; | ||
| private final ImmutableSet<String> errored; | ||
| private final ImmutableSet<String> mayBeDetermining; | ||
| private final ImmutableSet<String> mustBeDetermining; | ||
| private final ImmutableMap<String, JsonNode> residuals; | ||
| private final ImmutableSet<String> nontrivialResiduals; | ||
| private final ImmutableSet<String> warnings; | ||
|
|
||
| public PartialAuthorizationSuccessResponse( | ||
| AuthorizationSuccessResponse.Decision decision, Set<String> satisfied, Set<String> errored, | ||
| Set<String> mayBeDetermining, Set<String> mustBeDetermining, Map<String, JsonNode> residuals, | ||
| Set<String> nontrivialResiduals, Set<String> warnings) { | ||
| this.decision = decision; | ||
| // note that ImmutableSet.copyOf() attempts to avoid a full copy when possible | ||
| // see https://github.com/google/guava/wiki/ImmutableCollectionsExplained | ||
| this.satisfied = ImmutableSet.copyOf(satisfied); | ||
| this.errored = ImmutableSet.copyOf(errored); | ||
| this.mayBeDetermining = ImmutableSet.copyOf(mayBeDetermining); | ||
| this.mustBeDetermining = ImmutableSet.copyOf(mustBeDetermining); | ||
| this.residuals = ImmutableMap.copyOf(residuals); | ||
| this.nontrivialResiduals = ImmutableSet.copyOf(nontrivialResiduals); | ||
| if (warnings == null) { | ||
| this.warnings = ImmutableSet.of(); // empty | ||
| } else { | ||
| this.warnings = ImmutableSet.copyOf(warnings); | ||
| } | ||
| } | ||
|
|
||
| /** | ||
| * Deserializer factory method for PartialAuthorizationResponse. | ||
| * | ||
| * @param nested Deserialized object for nested JSON object. | ||
| * @param decision Deserialized `decision` attribute of nested JSON object. | ||
| * @param satisfied Deserialized `satisfied` attribute of nested JSON object. | ||
| * @param errored Deserialized `errored` attribute of nested JSON object. | ||
| * @param mayBeDetermining Deserialized `mayBeDetermining` attribute of nested JSON object. | ||
| * @param mustBeDetermining Deserialized `mustBeDetermining` attribute of nested JSON object. | ||
| * @param residuals Deserialized `residual` attribute of nested JSON object. | ||
| * @param nontrivialResiduals Deserialized `nontrivialResiduals` attribute of nested JSON object. | ||
| * @param warnings Deserialized `warnings` attribute of nested JSON object. | ||
| * @return | ||
| */ | ||
| @JsonCreator | ||
| public static PartialAuthorizationSuccessResponse createPartialAuthorizationSuccessResponse( | ||
| @JsonProperty("response") PartialAuthorizationSuccessResponse nested, | ||
| @JsonProperty("decision") AuthorizationSuccessResponse.Decision decision, | ||
| @JsonProperty("satisfied") Set<String> satisfied, | ||
| @JsonProperty("errored") Set<String> errored, | ||
| @JsonProperty("mayBeDetermining") Set<String> mayBeDetermining, | ||
| @JsonProperty("mustBeDetermining") Set<String> mustBeDetermining, | ||
| @JsonProperty("residuals") Map<String, JsonNode> residuals, | ||
| @JsonProperty("nontrivialResiduals") Set<String> nontrivialResiduals, | ||
| @JsonProperty("warnings") Set<String> warnings) { | ||
| if (nested != null) { | ||
| return nested; | ||
| } | ||
| return new PartialAuthorizationSuccessResponse(decision, satisfied, errored, mayBeDetermining, | ||
| mustBeDetermining, | ||
| residuals, nontrivialResiduals, warnings); | ||
| } | ||
|
|
||
| /** | ||
| * The optional decision returned by partial authorization | ||
| * | ||
| * @return a nullable reference to the decision (null means that no conclusive decision can be made) | ||
| */ | ||
| public AuthorizationSuccessResponse.Decision getDecision() { | ||
| return this.decision; | ||
| } | ||
|
|
||
| /** | ||
| * The map from policy ids to residuals | ||
| * | ||
| * @return map of residuals | ||
| */ | ||
| public Map<String, JsonNode> getResiduals() { | ||
| return this.residuals; | ||
| } | ||
|
|
||
| /** | ||
| * Set of policies that are satisfied by the partial request | ||
| * | ||
| * @return set of policy ids | ||
| */ | ||
| public Set<String> getSatisfied() { | ||
| return this.satisfied; | ||
| } | ||
|
|
||
| /** | ||
| * Set of policies that errored during the partial authorization | ||
| * | ||
| * @return set of policy ids | ||
| */ | ||
| public Set<String> getErrored() { | ||
| return this.errored; | ||
| } | ||
|
|
||
| /** | ||
| * Over approximation of policies that determine the auth decision | ||
| * | ||
| * @return set of policy ids | ||
| */ | ||
| public Set<String> getMayBeDetermining() { | ||
| return this.mayBeDetermining; | ||
| } | ||
|
|
||
| /** | ||
| * Under approximation of policies that determine the auth decision | ||
| * | ||
| * @return set of policy ids | ||
| */ | ||
| public Set<String> getMustBeDetermining() { | ||
| return this.mustBeDetermining; | ||
| } | ||
|
|
||
| /** | ||
| * Set of non-trivial residual policies | ||
| * | ||
| * @return set of policy ids | ||
| */ | ||
| public Set<String> getNontrivialResiduals() { | ||
| return this.nontrivialResiduals; | ||
| } | ||
| } |
Oops, something went wrong.