Package software.amazon.awssdk.services.verifiedpermissions.model

Class IsAuthorizedWithTokenResponse

    • Method Detail

      • decision

        public final Decision decision()

        An authorization decision that indicates if the authorization request should be allowed or denied.

        If the service returns an enum value that is not available in the current SDK version, decision will return Decision.UNKNOWN_TO_SDK_VERSION. The raw value returned by the service is available from decisionAsString().

        Returns:
        An authorization decision that indicates if the authorization request should be allowed or denied.
        See Also:
        Decision

      • decisionAsString

        public final String decisionAsString()

        An authorization decision that indicates if the authorization request should be allowed or denied.

        If the service returns an enum value that is not available in the current SDK version, decision will return Decision.UNKNOWN_TO_SDK_VERSION. The raw value returned by the service is available from decisionAsString().

        Returns:
        An authorization decision that indicates if the authorization request should be allowed or denied.
        See Also:
        Decision

      • hasDeterminingPolicies

        public final boolean hasDeterminingPolicies()
        For responses, this returns true if the service returned a value for the DeterminingPolicies property. This DOES NOT check that the value is non-empty (for which, you should check the isEmpty() method on the property). This is useful because the SDK will never return a null collection or map, but you may need to differentiate between the service returning nothing (or null) and the service returning an empty collection or map. For requests, this returns true if a value for the property was specified in the request builder, and false if a value was not specified.

      • determiningPolicies

        public final List<DeterminingPolicyItem> determiningPolicies()

        The list of determining policies used to make the authorization decision. For example, if there are multiple matching policies, where at least one is a forbid policy, then because forbid always overrides permit the forbid policies are the determining policies. If all matching policies are permit policies, then those policies are the determining policies. When no policies match and the response is the default DENY, there are no determining policies.

        Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.

        This method will never return null. If you would like to know whether the service returned this field (so that you can differentiate between null and empty), you can use the hasDeterminingPolicies() method.

        Returns:
        The list of determining policies used to make the authorization decision. For example, if there are multiple matching policies, where at least one is a forbid policy, then because forbid always overrides permit the forbid policies are the determining policies. If all matching policies are permit policies, then those policies are the determining policies. When no policies match and the response is the default DENY, there are no determining policies.

      • hasErrors

        public final boolean hasErrors()
        For responses, this returns true if the service returned a value for the Errors property. This DOES NOT check that the value is non-empty (for which, you should check the isEmpty() method on the property). This is useful because the SDK will never return a null collection or map, but you may need to differentiate between the service returning nothing (or null) and the service returning an empty collection or map. For requests, this returns true if a value for the property was specified in the request builder, and false if a value was not specified.

      • errors

        public final List<EvaluationErrorItem> errors()

        Errors that occurred while making an authorization decision. For example, a policy references an entity or entity attribute that does not exist in the slice.

        Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.

        This method will never return null. If you would like to know whether the service returned this field (so that you can differentiate between null and empty), you can use the hasErrors() method.

        Returns:
        Errors that occurred while making an authorization decision. For example, a policy references an entity or entity attribute that does not exist in the slice.

      • principal

        public final EntityIdentifier principal()

        The identifier of the principal in the ID or access token.

        Returns:
        The identifier of the principal in the ID or access token.

      • toString

        public final String toString()
        Returns a string representation of this object. This is useful for testing and debugging. Sensitive data will be redacted from this string using a placeholder value.
        Overrides:
        toString in class Object