--- /dev/null
+/* Copyright (c) 2019 AT&T Intellectual Property. #\r
+# #\r
+# Licensed under the Apache License, Version 2.0 (the "License"); #\r
+# you may not use this file except in compliance with the License. #\r
+# You may obtain a copy of the License at #\r
+# #\r
+# http://www.apache.org/licenses/LICENSE-2.0 #\r
+# #\r
+# Unless required by applicable law or agreed to in writing, software #\r
+# distributed under the License is distributed on an "AS IS" BASIS, #\r
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #\r
+# See the License for the specific language governing permissions and #\r
+# limitations under the License. #\r
+##############################################################################*/\r
+\r
+\r
+package org.oran.otf.api.config;\r
+\r
+import javax.servlet.Filter;\r
+import javax.servlet.FilterConfig;\r
+import javax.servlet.ServletException;\r
+import org.onap.aaf.cadi.Access;\r
+import org.springframework.boot.autoconfigure.condition.ConditionalOnProperty;\r
+import org.springframework.boot.web.servlet.FilterRegistrationBean;\r
+import org.springframework.context.annotation.Bean;\r
+import org.springframework.context.annotation.Conditional;\r
+import org.springframework.context.annotation.Configuration;\r
+import org.springframework.context.annotation.PropertySource;\r
+\r
+@PropertySource("classpath:application.properties")\r
+@Configuration\r
+@ConditionalOnProperty(prefix = "aaf",name ="enabled",havingValue = "true")\r
+public class OTFApiEnforcementFilterConfiguration {\r
+\r
+ private Access access;\r
+ private FilterConfig fc;\r
+\r
+ @Bean(name = "otfApiEnforcementFilterRegistrationBean")\r
+ @ConditionalOnProperty(prefix = "aaf",name ="enabled",havingValue = "true")\r
+ public FilterRegistrationBean<Filter> otfApiEnforcementFilterRegistration()\r
+ throws ServletException {\r
+ FilterRegistrationBean<Filter> registration = new FilterRegistrationBean<>();\r
+ initFilterParameters(registration);\r
+ registration.addUrlPatterns("/otf/api/testInstance/*", "/otf/api/testExecution/*", "/otf/api/testStrategy/*", "/otf/api/virtualTestHead/*");\r
+ registration.setFilter(otfApiEnforcementFilter());\r
+ registration.setName("otfApiEnforcementFilter");\r
+ registration.setOrder(1);\r
+ return registration;\r
+ }\r
+\r
+ @Bean(name = "otfApiEnforcementFilter")\r
+ @ConditionalOnProperty(prefix = "aaf",name ="enabled",havingValue = "true")\r
+ public Filter otfApiEnforcementFilter() throws ServletException {\r
+ return new OTFApiEnforcementFilter(access, System.getenv("AAF_PERM_TYPE"));\r
+ }\r
+\r
+ private void initFilterParameters(FilterRegistrationBean<Filter> registration) {\r
+ registration.addInitParameter("aaf_perm_type", System.getenv("AAF_PERM_TYPE"));\r
+ }\r
+}\r