Preparing the custom PDP bundle - 7.3

Talend ESB Infrastructure Services Configuration Guide

Version
7.3
Language
English
Product
Talend Data Fabric
Talend Data Services Platform
Talend ESB
Talend MDM Platform
Talend Open Studio for ESB
Talend Real-Time Big Data Platform
Module
Talend ESB
Talend Runtime
Content
Design and Development
Installation and Upgrade
Last publication date
2023-12-26

Procedure

  1. The interface for the PDP customization is included to the following tesb-xacml-pdp-api bundle:
    package org.talend.esb.authorization.xacml.pdp.api;
    import javax.xml.transform.Source;
    /**
     * An interface that describes a PolicyDecisionPoint (PDP).
     */
    public interface PolicyDecisionPoint {
        
        /**
         * Evaluate an XACML Request and return a Response
         * @param request an XACML Request as a Source
         * @return the XACML Response as a Source
         */
        Source evaluate(Source request);
        
    }
    So first of all, make sure this bundle is installed and accessible.
  2. The custom PDP bundle is an OSGi bundle which should import the authorization API resources and implement the org.talend.esb.authorization.xacml.pdp.api.PolicyDecisionPoint interface.
    So, create this OSGi bundle via Maven.
  3. Import the ESB XACML PDP API as a dependency to the Maven pom.xml:
    <dependency>
        <groupId>org.talend.esb.authorization</groupId>
        <artifactId>tesb-xacml-pdp-api</artifactId>
        <version>${project.version}</version>
        <scope>compile</scope>
    </dependency>
  4. When using Spring for the description and rendering of the beans for the PDP implementation, create the beans.xml file in src/main/resources/META-INF/spring if it not exist, and add the PDP interface implementation. For example:
    <bean id="pdpBean" class="org.talend.esb.authorization.xacml.pdp.herasaf.HerasAFPolicyDeci
    sionPoint">
    ...........
    </bean>
    The HerasAFPolicyDecisionPoint class mentioned in the example above should implement the PolicyDecisionPoint interface.
  5. Register the custom PDP as an OSGI service:
    <osgi:service ref="pdpBean" interface="org.talend.esb.authorization.xacml.pdp.api.PolicyDecisionPoi
    nt"/>