1 files changed, 37 insertions, 0 deletions
diff --git a/sliapi/springboot/src/main/java/org/onap/ccsdk/sli/core/sliapi/springboot/App.java b/sliapi/springboot/src/main/java/org/onap/ccsdk/sli/core/sliapi/springboot/App.java
index ed3ee044..2892430b 100644
--- a/sliapi/springboot/src/main/java/org/onap/ccsdk/sli/core/sliapi/springboot/App.java
+++ b/sliapi/springboot/src/main/java/org/onap/ccsdk/sli/core/sliapi/springboot/App.java
@@ -24,6 +24,13 @@ import org.springframework.boot.SpringApplication;
 import org.springframework.boot.autoconfigure.SpringBootApplication;
 import org.springframework.context.annotation.ComponentScan;
 import springfox.documentation.swagger2.annotations.EnableSwagger2;
+import org.apache.shiro.realm.Realm;
+import org.apache.shiro.realm.text.PropertiesRealm;
+import org.apache.shiro.realm.text.TextConfigurationRealm;
+import org.apache.shiro.spring.web.config.DefaultShiroFilterChainDefinition;
+import org.apache.shiro.spring.web.config.ShiroFilterChainDefinition;
+import org.springframework.context.annotation.Bean;
+import org.onap.aaf.cadi.shiro.AAFRealm;
 
 @SpringBootApplication
 @EnableSwagger2
@@ -34,4 +41,34 @@ public class App {
   public static void main(String[] args) throws Exception {
     SpringApplication.run(App.class, args);
   }
+
+  @Bean
+  public Realm realm() {
+
+    // If cadi prop files is not defined use local properties realm
+    // src/main/resources/shiro-users.properties
+    if ("none".equals(System.getProperty("cadi_prop_files", "none"))) {
+      PropertiesRealm realm = new PropertiesRealm();
+      return realm;
+    } else {
+      AAFRealm realm = new AAFRealm();
+      return realm;
+    }
+
+  }
+
+  @Bean
+  public ShiroFilterChainDefinition shiroFilterChainDefinition() {
+    DefaultShiroFilterChainDefinition chainDefinition = new DefaultShiroFilterChainDefinition();
+
+    // if cadi prop files is not set disable authentication
+    if ("none".equals(System.getProperty("cadi_prop_files", "none"))) {
+      chainDefinition.addPathDefinition("/**", "anon");
+    } else {
+      chainDefinition.addPathDefinition("/**", "authcBasic, rest[org.onap.sdnc:odl-api]");
+    }
+
+    return chainDefinition;
+  }
+
 }