Input/Output Schema

The Spring Boot SDK system uses a compatible input/output schema with the OPA Spring Boot SDK, which is documented here. To make the Spring Boot SDK system easier to use with the low-code policy editor, a slight variation of the Spring Boot SDK input schema is used where the most common HTTP headers are explicitly exposed, rather than defining the headers as an arbitrary map[string]string.

Input

Parameter	Type	Value	Description
input.resource.type	String	endpoint	A constant describing the type of resource being accessed.
input.resource.id	String	Endpoint servlet path
input.action.name	String	GET, POST, PUT, PATCH, HEAD, OPTIONS, TRACE, or DELETE	HTTP request method
input.action.protocol	String	HTTP protocol for request, e.g. HTTP 1.1
input.action.headers.authorization	String	HTTP authorization header	Not guaranteed to be present.
input.action.headers.accept	String	HTTP accept header	Not guaranteed to be present.
input.action.headers["accept-encoding"]	String	HTTP accept-encoding header	Not guaranteed to be present.
input.action.headers["accept-language"]	String	HTTP accept-language header	Not guaranteed to be present.
input.action.headers.connection	String	HTTP connection header	Not guaranteed to be present.
input.action.headers.cookie	String	HTTP cookie header	Not guaranteed to be present.
input.action.headers.host	String	HTTP host header	Not guaranteed to be present.
input.action.headers.referer	String	HTTP referer header	Not guaranteed to be present.
input.action.headers["user-agent"]	String	HTTP user-agent header	Not guaranteed to be present.
input.context.type	String	http	A constant describing the type of contextual information provided
input.context.host	String	HTTP remote host of request
input.context.ip	String	HTTP remote IP of request
input.context.port	String	HTTP remote port for request
input.context.data	Map[String, Any]		Optional supplemental data you can inject using a ContextDataProvider implementation
input.subject.type	String	java_authentication	A constant describing the kind of subject being provided.
input.subject.id	String	Spring authN principal	ID representing the subject being authorized.
input.subject.details	String	Spring authN details
input.subject.authorities	String	Spring authN authorities

Output

Parameter	Type	Description
output.decision	Boolean	true if and only if the request should be allowed to proceed, else false
output.context.data.system_type	String	Indicates the DAS system type, e.g. template.springboot:0.0