Class XACMLRequestProcessor

java.lang.Object
com.sun.identity.xacml.client.XACMLRequestProcessor

@SupportedAll public class XACMLRequestProcessor extends Object
This class provides the public API to process XACML context Request. This class accepts XACML context Request to get authorization decision, posts the request to PDP using SAML2 profile, gets SAML Response back, extacts XACML context Response from the XACMLAuthzDecisionStatement returned in SAML Response and returns the XACML context Response. XACML context Response includes the xacml context Result with the XACML context authorization Decision
  • Method Details

    • getInstance

      public static XACMLRequestProcessor getInstance() throws XACMLException
      Returns an instance of XACMLRequestProcessor
      Throws:
      XACMLException - If can not return an instance of XACMLRequestProcessor.
    • processRequest

      public Response processRequest(Request xacmlRequest, String pdpEntityId, String pepEntityId) throws XACMLException, com.sun.identity.saml2.common.SAML2Exception
      Processes an XACML context Request and returns an XACML context Response.
      Parameters:
      xacmlRequest - XACML context Request. This describes the Resource(s), Subject(s), Action, Environment of the request and corresponds to XACML context schema element Request. One would contruct this Request object using XACML client SDK.
      pdpEntityId - EntityID of PDP
      pepEntityId - EntityID of PEP
      Returns:
      XACML context Response. This corresponds to XACML context schema element Response
      Throws:
      XACMLException - if request could not be processed
      com.sun.identity.saml2.common.SAML2Exception