How can I configure Java code using files?

[#1]

We're trying to create a xacml pdp on apigee. I'm using balana pdp which requires a configuration file as well as xacml policy files but I don't have access to a filesystem on apigee. I am able to upload files in a jar and read them as a resource but balana can't read them this way. When I read the jar'd files as a resource and write them to the same location as a regular file, our java code says that the new file is readable but doesn't actually read anything. How do I work with apigee so that I can make configuration and policy files available for balana pdp to read?

[Former Community Member]

How about this? Create a "No-Target" API Proxy. The Assign Message of that proxy returns a XML that contains the XACML policy.

You can protect the API Proxy (with API Key or OAuth) and the Policy file can be shared by many proxies. When updated, all proxies can receive the updates.

If you are worried about network hops, you can use proxy chaining to call this proxy.

[DChiesa]

I don't think you can do it "out of the box".

It seems like a glaring oversight or functional gap that Balana cannot accept input configuration from something other than a java.io.File. For example, it could or should accept an org.w3c.dom.Document or a java.io.InputStream .

Fortunately, you should be able to modify ConfigurationStore.java , which is open-source, to do that. It should be pretty simple. Basically just follow the pattern in the getRootNode method. Create a method that accepts a stream or a Document or an Element, and ... with a little refactoring, it should just work.

Would love to hear your feedback on this.

[#4]

Yep. Thanks. I just wrote my own balana classes as needed and wrote the Config Store to read from a jar'd config file and used my own JarBasedPolicyFinderModule to read policies from jars. I'm just a "stickler for the rules" sometimes -- I stubbornly try to use things "as they should be used" (in this case, out of the box) before I finally take my own path.