The JSON PDP API is implemented with both an individual decision request endpoint and a batch request endpoint that consuming application servers can access using POST requests to the /governance-engine or /governance-engine/batch paths, respectively.

The HTTP requests must include the appropriate Content-Type and Accept headers, and request bodies must be valid JSON in the expected request format.

The endpoint paths and headers are listed in the following table.

JSON PDP API Endpoint path Action Content-Type/Accept Request data

/governance-engine

POST

application/json

JSON

/governance-engine/batch

POST

application/json

JSON

A successful JSON PDP API request goes through the following flow:

  1. The client makes the JSON request, which is received by the JSON PDP API. The API forwards the request to the Policy Decision Service.
  2. When the Policy Decision Service returns a response, the API sends the response to the client.
Note:

The Policy Enforcement Point (PEP) must apply any obligations or advice. See the JSON PDP API Reference for more information about making API requests.

Produced by OmniGraffle 7.21.2\n2023-01-18 19:49:14 +0000 Canvas 1 Layer 1 Canvas_1 Canvas_1_Layer_1 Group_2 Group_67 Group_108 Graphic_109 Group_96 Line_97 Group_88 Graphic_91 Graphic_90 Group_86 Line_87 Group_78 Graphic_81 Graphic_80 Graphic_79 Text JSON PDP API Group_76 Line_77 Group_68 Graphic_71 Graphic_70 Graphic_69 Text Client Group_38 Group_63 Graphic_66 Graphic_65 Graphic_64 Text Client receives JSON decision response Group_43 Graphic_46 Graphic_45 Graphic_44 Text Client makes JSON decision request Group_3 Group_36 Line_37 Group_34 Graphic_35 Text decision request Group_28 Line_29 Group_26 Graphic_27 Text decision response with statements Group_20 Line_21 Group_47 Graphic_50 Graphic_49 Graphic_48 Text API forwards decision request to Policy Decision Service Group_47 Graphic_50 Graphic_49 Graphic_48 Text Policy Decision Service handles decision request Group_4 Graphic_5 Group_6 Graphic_7 Text apply policy statements to API response Group_63 Graphic_66 Graphic_65 Graphic_64 Text Client applies statements Group_17 Graphic_18 Text decision response with statements Group_47 Graphic_50 Graphic_49 Graphic_48 Text Client shared secret verification (optional) Group_17 Graphic_18 Text shared secret verification Graphic_89 Text Policy Decision Service Group_68 Graphic_71 Graphic_70 Graphic_69 Text Client Group_78 Graphic_81 Graphic_80 Graphic_79 Text JSON PDP API Group_78 Graphic_81 Graphic_80 Graphic_79 Text Policy Decision Service Group_17 Graphic_18 Text decision request