Java RequestCtx类代码示例

import org.wso2.balana.ctx.xacml3.RequestCtx; //导入依赖的package包/类
/**
 *  Returns instance of <code>AbstractRequestCtx</code> based one the XACML version.
 *
 * @param root  the node to parse for the <code>AbstractRequestCtx</code>
 * @return <code>AbstractRequestCtx</code> object
 * @throws org.wso2.balana.ParsingException  if the DOM node is invalid
 */
public AbstractRequestCtx getRequestCtx(Node root) throws ParsingException {

    String requestCtxNs = root.getNamespaceURI();

    if(requestCtxNs != null){
        if(XACMLConstants.REQUEST_CONTEXT_3_0_IDENTIFIER.equals(requestCtxNs.trim())){
            return RequestCtx.getInstance(root);
        } else if(XACMLConstants.REQUEST_CONTEXT_1_0_IDENTIFIER.equals(requestCtxNs.trim()) ||
                XACMLConstants.REQUEST_CONTEXT_2_0_IDENTIFIER.equals(requestCtxNs.trim())) {
            return org.wso2.balana.ctx.xacml2.RequestCtx.getInstance(root);
        } else {
            throw new ParsingException("Invalid namespace in XACML request");
        }
    } else {
        log.warn("No Namespace defined in XACML request and Assume as XACML 3.0");
        return RequestCtx.getInstance(root);
    }
}
 

import org.wso2.balana.ctx.xacml3.RequestCtx; //导入依赖的package包/类
/**
 * API endpoint for evaluating XACML XML policies
 *
 * @return XML Policy result String
 */
@POST
@Path("pdp")
@Produces({MediaType.APPLICATION_JSON, MediaType.APPLICATION_XML})
@Consumes({MediaType.APPLICATION_JSON, MediaType.APPLICATION_XML})
@ApiOperation(value = "Get response by evaluating JSON/XML XACML request", response = String.class)
@ApiResponses(value = {
        @ApiResponse(code = 200, message = "XACML JSON/XML Response"),
        @ApiResponse(code = 40010, message = EntitlementEndpointConstants.ERROR_UNAUTHORIZED_MESSAGE,
                response = ExceptionBean.class),
        @ApiResponse(code = 40020, message = EntitlementEndpointConstants.ERROR_REQUEST_PARSE_MESSAGE,
                response = ExceptionBean.class),
        @ApiResponse(code = 40010, message = EntitlementEndpointConstants.ERROR_RESPONSE_READ_MESSAGE,
                response = ExceptionBean.class)
})
public String getDecision(@ApiParam(value = "Request Media Type", required = true)
                          @HeaderParam(EntitlementEndpointConstants.ACCEPT_HEADER) String format,
                          @ApiParam(value = "Authentication Type", required = true)
                          @HeaderParam(EntitlementEndpointConstants.AUTHENTICATION_TYPE_HEADER) String authMechanism,
                          @ApiParam(value = "Add HTTP Basic Authorization", required = true)
                          @HeaderParam(EntitlementEndpointConstants.AUTHORIZATION_HEADER) String authorization,
                          @ApiParam(value = "Response Media Type", required = true)
                          @HeaderParam(EntitlementEndpointConstants.CONTENT_TYPE_HEADER) String contentType,
                          @ApiParam(value = "XACML JSON/XML Request", required = true)
                                  String xacmlRequest) throws Exception {

    if (log.isDebugEnabled()) {
        log.debug("recieved :" + xacmlRequest);
    }
    EntitlementEngine entitlementEngine = EntitlementEngine.getInstance();

    if (contentType.equals(EntitlementEndpointConstants.APPLICATION_JSON)) {
        RequestCtx requestCtx = JSONRequestParser.parse(xacmlRequest);
        ResponseCtx responseCtx = entitlementEngine.evaluate(requestCtx, xacmlRequest);
        return gson.toJson(JSONResponseWriter.write(responseCtx));
    } else {
        return entitlementEngine.evaluate(xacmlRequest);
    }

}
 

import org.wso2.balana.ctx.xacml3.RequestCtx; //导入依赖的package包/类
public EvaluationCtx getEvaluationCtx(AbstractRequestCtx requestCtx, PDPConfig pdpConfig)
                                                                    throws ParsingException {

    if(XACMLConstants.XACML_VERSION_3_0 == requestCtx.getXacmlVersion()){
        return new XACML3EvaluationCtx((RequestCtx)requestCtx, pdpConfig);
    } else {
        return new XACML2EvaluationCtx((org.wso2.balana.ctx.xacml2.RequestCtx) requestCtx, pdpConfig);
    }
}
 

import org.wso2.balana.ctx.xacml3.RequestCtx; //导入依赖的package包/类
/**
 * A private helper routine that resolves a policy for the given context, and then tries to
 * evaluate based on the policy
    *
    * @param context  context
    * @return a response
    */
private AbstractResult evaluateContext(EvaluationCtx context) {
	// first off, try to find a policy
	PolicyFinderResult finderResult = policyFinder.findPolicy(context);

	// see if there weren't any applicable policies
	if (finderResult.notApplicable()){
           return ResultFactory.getFactory().getResult(AbstractResult.DECISION_NOT_APPLICABLE, context);
       }
	// see if there were any errors in trying to get a policy
	if (finderResult.indeterminate()){
           return ResultFactory.getFactory().getResult(AbstractResult.DECISION_INDETERMINATE,
                   finderResult.getStatus(), context);
       }

	// we found a valid policy,

       // list all found policies if XACML 3.0
       if(context instanceof XACML3EvaluationCtx && ((RequestCtx)context.getRequestCtx()).
                                                                           isReturnPolicyIdList()){
           Set<PolicyReference> references = new HashSet<PolicyReference>();
           processPolicyReferences(finderResult.getPolicy(), references);
           ((XACML3EvaluationCtx) context).setPolicyReferences(references);
       }

       // so we can do the evaluation
	return finderResult.getPolicy().evaluate(context);
}
 

import org.wso2.balana.ctx.xacml3.RequestCtx; //导入依赖的package包/类
/**
 * A private helper routine that resolves a policy for the given context, and then tries to
 * evaluate based on the policy
 *
 * @param context context
 * @return a response
 */
private AbstractResult evaluateContext(EvaluationCtx context) {
    // first off, try to find a policy
    PolicyFinderResult finderResult = policyFinder.findPolicy(context);

    // see if there weren't any applicable policies
    if (finderResult.notApplicable()) {
        return ResultFactory.getFactory().getResult(AbstractResult.DECISION_NOT_APPLICABLE, context);
    }
    // see if there were any errors in trying to get a policy
    if (finderResult.indeterminate()) {
        return ResultFactory.getFactory().getResult(AbstractResult.DECISION_INDETERMINATE,
                finderResult.getStatus(), context);
    }

    // we found a valid policy,

    // list all found policies if XACML 3.0
    if (context instanceof XACML3EvaluationCtx && ((RequestCtx) context.getRequestCtx()).
            isReturnPolicyIdList()) {
        Set<PolicyReference> references = new HashSet<PolicyReference>();
        processPolicyReferences(finderResult.getPolicy(), references);
        ((XACML3EvaluationCtx) context).setPolicyReferences(references);
    }

    // so we can do the evaluation
    return finderResult.getPolicy().evaluate(context);
}
 

import org.wso2.balana.ctx.xacml3.RequestCtx; //导入依赖的package包/类
@Test
public void testParse() {
    AttributeValue attributeValue = new StringAttribute("http://127.0.0.1");
    List<AttributeValue> attributeValues = new ArrayList<>();
    attributeValues.add(attributeValue);

    Attribute attribute = new Attribute(URI.create("urn:oasis:names:tc:xacml:1.0:resource:resource-id"),
            null, null, null, attributeValues, false, XACMLConstants.XACML_VERSION_3_0);
    Set<Attribute> attributeSet = new HashSet<>();
    attributeSet.add(attribute);

    Attributes category = new Attributes(URI.create(EntitlementEndpointConstants.CATEGORY_RESOURCE_URI),
            attributeSet);
    Set<Attributes> categories = new HashSet<>();
    categories.add(category);

    RequestCtx requestCtx = new RequestCtx(categories, null);


    String jsonRequest = "{\n" +
            "  \"Request\":{\n" +
            "    \"Action\":{\n" +
            "      \"Attribute\":[{\n" +
            "        \"AttributeId\":\"urn:oasis:names:tc:xacml:1.0:action:action-id\",\n" +
            "        \"Value\":\"read\"\n" +
            "      }]\n" +
            "    },\n" +
            "    \"Resource\":{\n" +
            "      \"Attribute\":[{\n" +
            "        \"AttributeId\":\"urn:oasis:names:tc:xacml:1.0:resource:resource-id\",\n" +
            "        \"Value\":\"http://127.0.0.1/service/very_secure/\"\n" +
            "      }]\n" +
            "    }\n" +
            "  }\n" +
            "}";

    String jsonRequest2 = "{\"Request\":\n" +
            "{\n" +
            "\"AccessSubject\":{\n" +
            "            \"Content\": \"PD94bWwgdmVyc2lvbj0iMS4wIj8+DQo8Y2F0YWxvZz48Ym9vayBpZD0iYmsxMDEiPjxhdXRob3I+R2FtYmFyZGVsbGEsIE1hdHRoZXc8L2F1dGhvcj48dGl0bGU+WE1MIERldmVsb3BlcidzIEd1aWRlPC90aXRsZT48Z2VucmU+Q29tcHV0ZXI8L2dlbnJlPjxwcmljZT40NC45NTwvcHJpY2U+PHB1Ymxpc2hfZGF0ZT4yMDAwLTEwLTAxPC9wdWJsaXNoX2RhdGU+PGRlc2NyaXB0aW9uPkFuIGluLWRlcHRoIGxvb2sgYXQgY3JlYXRpbmcgYXBwbGljYXRpb25zIHdpdGggWE1MLjwvZGVzY3JpcHRpb24+PC9ib29rPjwvY2F0YWxvZz4=\"\n" +
            "}\n" +
            "}}";

    try {
        RequestCtx requestCtx1 = JSONRequestParser.parse(jsonRequest);
    } catch (Exception e) {
        log.error("Exception in JSON Parser Test");
    }


}