Public | Automated Build

Last pushed: 2 months ago
Short Description
XACML Authorization Server
Full Description


Keypass is multi-tenant XACML server with PAP (Policy Administration Point) and
PDP (Policy Decision Point) capabilities.

KeyPass is based mainly on:

  • Balana,
    a complete implementation of both XACML v2 and v3 specs
  • Dropwizard, a framework for developing
    high-performance, RESTful web services.

In this README document you will find how to get started with the application and
basic concepts. For a more detailed information you can read the following docs:


Building requires Java 6+ and Maven 3.

$ mvn package

Building RPM (needs native rpmbuild installed in your box, tested on MacOSX
and Redhat Linux. May work on other platforms as well):

$ mvn -Prpm package

Building ZIP file

$ mvn -Pzip package


$ java -jar target/keypass-<VERSION>.jar server conf/config.yml


Create a policy

curl -i -H "Accept: application/xml" -H "Content-type: application/xml" \
    -H "Fiware-Service: myTenant" \
    -X POST -d @src/test/resources/es/tid/fiware/iot/ac/xacml/policy01.xml \

Response should be something like this:

HTTP/1.1 201 Created
Date: Mon, 15 Sep 2014 20:02:35 GMT
Location: http://localhost:8080/pap/v1/subject/role12345/policy/policy01
Content-Type: application/xml
Content-Length: 0

Retrieve a policy

curl -i -H "Fiware-Service: myTenant" \

Response will be the previously uploaded policy.

Evaluate XACML request

curl -i -H "Accept: application/xml" -H "Content-type: application/xml" \
    -H "Fiware-Service: myTenant" \
    -X POST -d @src/test/resources/es/tid/fiware/iot/ac/xacml/policy01_request01.xml \


HTTP/1.1 200 OK
Date: Mon, 15 Sep 2014 20:10:45 GMT
Content-Type: application/xml
Transfer-Encoding: chunked

<Response xmlns="urn:oasis:names:tc:xacml:3.0:core:schema:wd-17"><Result><Decision>Permit</Decision><Status><StatusCode Value="urn:oasis:names:tc:xacml:1.0:status:ok"/></Status></Result></Response>
Docker Pull Command
Source Repository