Skip to main content
Version: 1.12

Content negotiation

Access Decision Service supports three content types:

  • application/xacml+json

  • application/xacml+xml

  • application/json

All three content types can be used for both requests and responses, and the request and the response can have different content types.

Request​

The content type of the request is specified using the HTTP header content-type (or Content-Type, the headers are case-insensitive). This header is mandatory on each request. A non-valid header will result in HTTP 415 Unsupported media type.

curl --data @request.json -H content-type:application/xacml+json http://localhost:8080/authorize

Response​

The content-type of the response is specified using the HTTP header accept. The default is application/xacml+json. A non-valid header will result in HTTP 406 Not acceptable.

curl --data @request.json -H content-type:application/xacml+json -H accept:application/xacml+xml http://localhost:8080/authorize