Skip to content

GitLab

C
core
Commit 03bac1fa authored by cdanger's avatar cdanger
Browse files
Options

- upgraded core-pdp-api to v4.0.0 (simplified method signature: 

FirstOrderBags.getFunctions(DatatypeFactory<AV>) and fixed license
header)
- Changed request filter IDs:
	- urn:ow2:authzforce:xacml:request-filter:default-lax ->
urn:ow2:authzforce:feature:pdp:request-filter:default-lax
	- urn:ow2:authzforce:xacml:request-filter:default-strict ->
urn:ow2:authzforce:feature:pdp:request-filter:default-strict
    - urn:ow2:authzforce:xacml:request-filter:multiple:repeated-attribute-categories-strict
->
urn:ow2:authzforce:feature:pdp:request-filter:multiple:repeated-attribute-categories-strict
    - urn:ow2:authzforce:xacml:request-filter:multiple:repeated-attribute-categories-lax
->
urn:ow2:authzforce:feature:pdp:request-filter:multiple:repeated-attribute-categories-lax
- Fixed doc in pdp.xsd on PDP extensions
parent 9b3e9cf2
Hide whitespace changes
Inline Side-by-side
Showing with 21 additions and 23 deletions
pom.xml
View file @ 03bac1fa
......@@ -43,8 +43,7 @@
<dependency>
<groupId>${project.groupId}</groupId>
<artifactId>${artifactId.prefix}-core-pdp-api</artifactId>
<!-- Version should be greater or equal to this artifact version with respect Semantic Versioning -->
<version>3.8.0</version>
<version>4.0.0</version>
</dependency>
<!-- /Authzforce dependencies -->
......@@ -112,7 +111,6 @@
<artifactId>license-maven-plugin</artifactId>
<configuration>
<header>license/thales-gpl.header.txt</header>
<skipExistingHeaders>true</skipExistingHeaders>
<includes>
<include>src/main/java/org/ow2/authzforce/core/**</include>
<!-- Include test files also -->
......
src/main/java/org/ow2/authzforce/core/pdp/impl/DefaultRequestFilter.java
View file @ 03bac1fa
......@@ -50,7 +50,7 @@ public final class DefaultRequestFilter extends BaseRequestFilter
/**
* Request filter ID, as returned by {@link #getId()}
*/
public static final String ID = "urn:ow2:authzforce:xacml:request-filter:default-lax";
public static final String ID = "urn:ow2:authzforce:feature:pdp:request-filter:default-lax";
@Override
public String getId()
......@@ -79,7 +79,7 @@ public final class DefaultRequestFilter extends BaseRequestFilter
*/
public static final class StrictFilterFactory implements RequestFilter.Factory
{
private static final String ID = "urn:ow2:authzforce:xacml:request-filter:default-strict";
private static final String ID = "urn:ow2:authzforce:feature:pdp:request-filter:default-strict";
@Override
public String getId()
......
src/main/java/org/ow2/authzforce/core/pdp/impl/MultiDecisionRequestFilter.java
View file @ 03bac1fa
......@@ -53,7 +53,7 @@ public final class MultiDecisionRequestFilter extends BaseRequestFilter
/**
* Request filter ID, returned by {@link #getId()}
*/
public static final String ID = "urn:ow2:authzforce:xacml:request-filter:multiple:repeated-attribute-categories-lax";
public static final String ID = "urn:ow2:authzforce:feature:pdp:request-filter:multiple:repeated-attribute-categories-lax";
@Override
public String getId()
......@@ -79,7 +79,7 @@ public final class MultiDecisionRequestFilter extends BaseRequestFilter
/**
* Request filter ID, returned by {@link #getId()}
*/
public static final String ID = "urn:ow2:authzforce:xacml:request-filter:multiple:repeated-attribute-categories-strict";
public static final String ID = "urn:ow2:authzforce:feature:pdp:request-filter:multiple:repeated-attribute-categories-strict";
@Override
public String getId()
......
src/main/java/org/ow2/authzforce/core/pdp/impl/PDPImpl.java
View file @ 03bac1fa
......@@ -188,7 +188,7 @@ public class PDPImpl implements CloseablePDP
private static final DecisionResultFilter DEFAULT_RESULT_FILTER = new DecisionResultFilter()
{
private static final String ID = "urn:ow2:authzforce:xacml:result-filter:default";
private static final String ID = "urn:ow2:authzforce:feature:pdp:result-filter:default";
@Override
public String getId()
......
src/main/resources/pdp.xsd
View file @ 03bac1fa
......@@ -23,7 +23,7 @@
<element name="attributeProvider" type="authz-ext:AbstractAttributeProvider">
<annotation>
<documentation>Attribute Provider that provides attributes not already provided in the XACML request by PEP, e.g. from external sources. There must be one and only one Java class - say
'com.example.FooAttributeProviderModuleFactory' - on the classpath implementing interface 'org.ow2.authzforce.core.pdp.api.AttributeProviderModule.Factory&lt;CONF_T&gt;' with zero-arg constructor,
'com.example.FooAttributeProviderModuleFactory' - on the classpath implementing interface 'org.ow2.authzforce.core.pdp.api.CloseableAttributeProviderModule.FactoryBuilder&lt;CONF_T&gt;' with zero-arg constructor,
where
CONF_T is the JAXB type bound to this XML element type. This attribute Provider may also depend on previously defined 'attributeProviders', to find dependency attributes, i.e. attributes that
this
......@@ -39,28 +39,28 @@
<element name="attributeDatatype" type="anyURI" minOccurs="0" maxOccurs="unbounded">
<annotation>
<documentation>URI of an attribute datatype to be added to supported datatypes. There must be one and only one Java class - say 'com.example.FooValueFactory' - on the classpath implementing
interface 'org.ow2.authzforce.core.value.DatatypeFactory' with zero-arg constructor, such that this URI equals: new com.example.FooValueFactory().getId().
interface ' org.ow2.authzforce.core.pdp.api.value.DatatypeFactory' with zero-arg constructor, such that this URI equals: new com.example.FooValueFactory().getId().
</documentation>
</annotation>
</element>
<element name="function" type="anyURI" minOccurs="0" maxOccurs="unbounded">
<annotation>
<documentation>URI of a function to be added to supported functions. There must be one and only one Java class - say 'com.example.FooFunction' - on the classpath implementing interface
'com.sun.xacml.Function' with zero-arg constructor, such that this URI equals: new com.example.FooFunction().getId().
'org.ow2.authzforce.core.pdp.api.func.Function' with zero-arg constructor, such that this URI equals: new com.example.FooFunction().getId().
</documentation>
</annotation>
</element>
<element name="functionSet" type="anyURI" minOccurs="0" maxOccurs="unbounded">
<annotation>
<documentation>URI of a set of functions to be added to supported functions. There must be one and only one Java class - say 'com.example.FooFunctionSet' - on the classpath implementing
interface 'org.ow2.authzforce.core.func.FunctionSet' with zero-arg constructor, such that this URI equals: new com.example.FooFunctionSet().getId().
interface 'org.ow2.authzforce.core.pdp.api.func.FunctionSet' with zero-arg constructor, such that this URI equals: new com.example.FooFunctionSet().getId().
</documentation>
</annotation>
</element>
<element name="combiningAlgorithm" type="anyURI" minOccurs="0" maxOccurs="unbounded">
<annotation>
<documentation>URI of a policy/rule-combining algorithm to be added to supported algorithms. There must be one and only one Java class - say 'com.example.FooCombiningAlg' - on the classpath
implementing interface 'org.ow2.authzforce.core.pdp.api.CombiningAlg' with zero-arg constructor, such that this URI equals: new com.example.FooCombiningAlg().getId().
implementing interface 'org.ow2.authzforce.core.pdp.api.combining.CombiningAlg' with zero-arg constructor, such that this URI equals: new com.example.FooCombiningAlg().getId().
</documentation>
</annotation>
</element>
......@@ -68,7 +68,7 @@
<element name="refPolicyProvider" type="authz-ext:AbstractPolicyProvider" minOccurs="0" maxOccurs="1">
<annotation>
<documentation>Referenced policy Provider that resolves Policy(Set)IdReferences. There must be one and only one Java class - say 'com.example.FooRefPolicyProviderModuleFactory' - on the
classpath implementing interface 'org.ow2.authzforce.core.pdp.api.RefPolicyProviderModule.Factory&lt;CONF_T&gt;' with zero-arg constructor, where CONF_T is the JAXB type bound to
classpath implementing interface 'org.ow2.authzforce.core.pdp.api.policy.RefPolicyProviderModule.Factory&lt;CONF_T&gt;' with zero-arg constructor, where CONF_T is the JAXB type bound to
this XML
element type. This referenced policy Provider may also use any of the 'refPolicyProvider' previously defined, if any, for Policy(Set)IdReference resolution; as some IdReferences may
not be
......@@ -79,9 +79,9 @@
<element name="rootPolicyProvider" type="authz-ext:AbstractPolicyProvider">
<annotation>
<documentation>Root/top-level policy Provider that provides the root/top-level Policy(Set) to PDP for evaluation. There must be one and only one Java class - say
'com.example.FooRootPolicyProviderModuleFactory' - on the classpath implementing interface 'org.ow2.authzforce.core.pdp.api.RootPolicyProviderModule.Factory&lt;CONF_T&gt;' with zero-arg
'com.example.FooRootPolicyProviderModuleFactory' - on the classpath implementing interface 'org.ow2.authzforce.core.pdp.api.policy.RootPolicyProviderModule.Factory&lt;CONF_T&gt;' with zero-arg
constructor, where CONF_T is the JAXB type bound to this XML element type. This class may also implement
'org.ow2.authzforce.core.pdp.api.RefPolicyProviderModule.Factory&lt;CONF_T&gt;' to
'org.ow2.authzforce.core.pdp.api.policy.RefPolicyProviderModule.Factory&lt;CONF_T&gt;' to
be used
as 'refPolicyProvider' as well. This policy Provider may also use any of the
'refPolicyProvider' previously defined, if any, for Policy(Set)IdReference resolution.
......@@ -147,7 +147,7 @@
<documentation>Maximum depth of Policy(Set) reference chaining: PolicySet1 -&gt; PolicySet2 -&gt; ... -&gt; Policy(Set)N; where '-&gt;' represents a Policy(Set)IdReference. </documentation>
</annotation>
</attribute>
<attribute name="requestFilter" type="anyURI" use="optional" default="urn:ow2:authzforce:xacml:request-filter:default-lax">
<attribute name="requestFilter" type="anyURI" use="optional" default="urn:ow2:authzforce:feature:pdp:request-filter:default-lax">
<annotation>
<documentation>
<p>URI of a XACML Request filter to be enabled. A XACML Request filter is a PDP extension that applies some processing of the request, such as validation and transformation, prior to the policy
......@@ -166,13 +166,13 @@
map returned by getNamedAttributes() on
the IndividualDecisionRequests produced by the RequestFilter.</p>
<p>The following values of 'requestFilter' are natively supported:</p>
<p>"urn:ow2:authzforce:xacml:request-filter:default-lax": implements only XACML 3.0 Core (NO support for Multiple Decision) and allows duplicate &lt;Attribute&gt; with same meta-data in the same &lt;Attributes&gt; element of a Request
<p>"urn:ow2:authzforce:feature:pdp:request-filter:default-lax": implements only XACML 3.0 Core (NO support for Multiple Decision) and allows duplicate &lt;Attribute&gt; with same meta-data in the same &lt;Attributes&gt; element of a Request
(complying with XACML 3.0 core spec, §7.3.3)</p>
<p>"urn:ow2:authzforce:xacml:request-filter:default-strict": implements only XACML 3.0 Core (NO support for Multiple Decision) and does not allow duplicate &lt;Attribute&gt; with same meta-data in the same &lt;Attributes&gt; element of a Request
<p>"urn:ow2:authzforce:feature:pdp:request-filter:default-strict": implements only XACML 3.0 Core (NO support for Multiple Decision) and does not allow duplicate &lt;Attribute&gt; with same meta-data in the same &lt;Attributes&gt; element of a Request
(NOT complying with XACML 3.0 core spec, §7.3.3, but better performances)</p>
<p>"urn:ow2:authzforce:xacml:request-filter:multiple:repeated-attribute-categories-lax": implements Multiple Decision Profile, section 2.3 (repeated attribute categories), and allows duplicate &lt;Attribute&gt; with same meta-data in the same
<p>"urn:ow2:authzforce:feature:pdp:request-filter:multiple:repeated-attribute-categories-lax": implements Multiple Decision Profile, section 2.3 (repeated attribute categories), and allows duplicate &lt;Attribute&gt; with same meta-data in the same
&lt;Attributes&gt; element of a Request (complying with XACML 3.0 core spec, §7.3.3)</p>
<p>"urn:ow2:authzforce:xacml:request-filter:multiple:repeated-attribute-categories-strict": same as previous one, except it does not allow duplicate &lt;Attribute&gt; with same meta-data in the same
<p>"urn:ow2:authzforce:feature:pdp:request-filter:multiple:repeated-attribute-categories-strict": same as previous one, except it does not allow duplicate &lt;Attribute&gt; with same meta-data in the same
&lt;Attributes&gt; element of a Request (NOT complying with XACML 3.0 core spec, §7.3.3, but better performances)</p>
</documentation>
</annotation>
......
src/test/java/org/ow2/authzforce/core/test/custom/TestCombinedDecisionResultFilter.java
View file @ 03bac1fa
......@@ -40,7 +40,7 @@ import org.ow2.authzforce.core.pdp.api.StatusHelper;
*/
public class TestCombinedDecisionResultFilter implements DecisionResultFilter
{
public static final String ID = "urn:ow2:authzforce:xacml:result-filter:multiple:test-combined-decision";
public static final String ID = "urn:ow2:authzforce:feature:pdp:result-filter:multiple:test-combined-decision";
private static final List<Result> INDETERMINATE_RESULT_SINGLETON_LIST = Collections.singletonList(new Result(DecisionType.INDETERMINATE, new StatusHelper(StatusHelper.STATUS_PROCESSING_ERROR,
null), null, null, null, null));
......
src/test/resources/custom/CustomResultFilter(IIIE302+CombinedDecision)/pdp.xml
View file @ 03bac1fa
<?xml version="1.0" encoding="UTF-8"?>
<!-- Testing parameter 'maxPolicySetRefDepth' -->
<pdp xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://authzforce.github.io/core/xmlns/pdp/3.6" version="3.6.4"
requestFilter="urn:ow2:authzforce:xacml:request-filter:multiple:repeated-attribute-categories-lax" resultFilter="urn:ow2:authzforce:xacml:result-filter:multiple:test-combined-decision">
requestFilter="urn:ow2:authzforce:feature:pdp:request-filter:multiple:repeated-attribute-categories-lax" resultFilter="urn:ow2:authzforce:feature:pdp:result-filter:multiple:test-combined-decision">
<rootPolicyProvider id="rootPolicyProvider" xsi:type="StaticRootPolicyProvider" policyLocation="${PARENT_DIR}/policy.xml" />
</pdp>
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment