/** Event containing extracted information retrieved from a
* http request where we want to check the validity of the user */
event ActionRequest {
string authorization;
string actionToTake;
string requestId;
string channel;
}
/** Response for the HTTP request */
event ActionResponse {
string requestId;
string actionResult;
}
/** Response if authorization failed */
event ActionNotAllowed {
string requestId;
}
...
monitor.subscribe(GetCurrentUserResponse.SUBSCRIBE_CHANNEL);

// Listen for incoming HTTP requests

on all ActionRequest() as ar {
integer reqId := com.apama.cumulocity.Util.generateReqId();
// Send a request to check the user from the incoming request
GetCurrentUser checkUser := new GetCurrentUser;
checkUser.reqId := reqId;
checkUser.authorization := ar.authorization;
send checkUser to GetCurrentUser.SEND_CHANNEL;

// if authentication passed, check authorization
on GetCurrentUserResponse(reqId=reqId) as res and not
GetCurrentUserResponseFailed(reqId=reqId) {
if checkHasRoles("ActionAllowed", res.user.effectiveRoles) {
send ActionResponse(ar.requestId, performAction(ar.actionToTake))
to ar.channel;
} else {
send ActionNotAllowed(ar.requestId) to ar.channel;
}
}

// if authentication failed, return an error
on GetCurrentUserResponseFailed(reqId=reqId) as err and not
GetCurrentUserResponse(reqId=reqId) {
send ActionNotAllowed(ar.requestId) to ar.channel;
}
}
action performAction(string actiontoTake) returns string{
// do some action
return "";
}

action checkHasRoles(string role,sequence<Role> effectiveRoles) returns boolean {
Role r;
for r in effectiveRoles {
if r.id = role{
return true;
}
}
return false;
}

}