Configuration property fixed at build time - All other configuration properties are overridable at runtime

Configuration property

Type

Default

quarkus.zanzibar.filter.enabled

Whether the filter is enabled.

When enabled all endpoints must have a resolvable FGADynamicObject and FGARelation otherwise a FORBIDDEN will be returns to clients.

Environment variable: QUARKUS_ZANZIBAR_FILTER_ENABLED

boolean

true

quarkus.zanzibar.filter.deny-unannotated-resource-methods

Should access to resource methods without FGA annotations be denied.

Environment variable: QUARKUS_ZANZIBAR_FILTER_DENY_UNANNOTATED_RESOURCE_METHODS

boolean

true

quarkus.zanzibar.filter.unauthenticated-user

User-id used for authorization when the request is unauthenticated.

Environment variable: QUARKUS_ZANZIBAR_FILTER_UNAUTHENTICATED_USER

string

quarkus.zanzibar.filter.timeout

Maximum time an authorization check is allowed to take.

Environment variable: QUARKUS_ZANZIBAR_FILTER_TIMEOUT

Duration

5S
About the Duration format

To write duration values, use the standard java.time.Duration format. See the Duration#parse() Java API documentation for more information.

You can also use a simplified format, starting with a number:

  • If the value is only a number, it represents time in seconds.

  • If the value is a number followed by ms, it represents time in milliseconds.

In other cases, the simplified format is translated to the java.time.Duration format for parsing:

  • If the value is a number followed by h, m, or s, it is prefixed with PT.

  • If the value is a number followed by d, it is prefixed with P.