add support for changing the reason key

Author: Charles Daniels

.gradle/8.9/executionHistory/executionHistory.bin

@@ -1,5 +1,9 @@
 # OPA-SpringBoot Changelog
 
+## v0.0.2 (unreleased)
+
+* Rather than hard-coding `en`, the preferred key to search for decision reasons for can now be changed with `OPAAuthorizationManager.setReasonKey()`. The default remains `en`.
+
 ## v0.0.1
 
 * Initial release of OPA-SpringBoot

.gradle/8.9/executionHistory/executionHistory.lock

@@ -45,6 +45,8 @@ public class OPAAuthorizationManager
     // If opaPath is null, then we assume the user wants to use the default path.
     private String opaPath;
 
+    private String reasonKey;
+
     private ContextDataProvider ctxProvider;
 
     private OPAClient opa;
@@ -64,6 +66,7 @@ public OPAAuthorizationManager() {
         OPAClient opac = new OPAClient(opaURL);
         this.opa = opac;
         this.opaPath = null;
+        this.reasonKey = "en";
     }
 
     /**
@@ -76,6 +79,7 @@ public OPAAuthorizationManager() {
     public OPAAuthorizationManager(OPAClient opa) {
         this.opa = opa;
         this.opaPath = null;
+        this.reasonKey = "en";
     }
 
     /**
@@ -90,6 +94,7 @@ public OPAAuthorizationManager(OPAClient opa) {
     public OPAAuthorizationManager(OPAClient opa, String newOpaPath) {
         this.opa = opa;
         this.opaPath = newOpaPath;
+        this.reasonKey = "en";
     }
 
     /**
@@ -104,6 +109,7 @@ public OPAAuthorizationManager(OPAClient opa, String newOpaPath) {
     public OPAAuthorizationManager(OPAClient opa, ContextDataProvider newProvider) {
         this.opa = opa;
         this.ctxProvider = newProvider;
+        this.reasonKey = "en";
     }
 
     /**
@@ -119,6 +125,23 @@ public OPAAuthorizationManager(OPAClient opa, String newOpaPath, ContextDataProv
         this.opa = opa;
         this.opaPath = newOpaPath;
         this.ctxProvider = newProvider;
+        this.reasonKey = "en";
+    }
+
+    public String getReasonKey() {
+        return this.reasonKey;
+    }
+
+    /**
+     * Changes the "preferred" key where the access decision reason should be
+     * searched for in the OPAResponse object. A default value of 'en' is used.
+     * If the selected key is not present in the response, the key which sorts
+     * lexicographically first is used instead.
+     *
+     * @param newReasonKey
+     */
+    public void setReasonKey(String newReasonKey) {
+        this.reasonKey = newReasonKey;
     }
 
     private Map<String, Object> makeRequestInput(
@@ -250,9 +273,9 @@ public void verify(
         }
 
         boolean allow = resp.getDecision();
-        String reason = "access denied by policy";
-        if (resp.getReasonForDecision() != null) {
-            reason = resp.getReasonForDecision();
+        String reason = resp.getReasonForDecision(this.reasonKey);
+        if (reason == null) {
+            reason = "access denied by policy";
         }
 
         if (allow) {