Use AuthorizationMode to configure behaviour of PeerAuthorizerTrustManager

1 files changed, 7 insertions, 0 deletions

diff --git a/security-utils/src/main/java/com/yahoo/security/tls/TransportSecurityUtils.java b/security-utils/src/main/java/com/yahoo/security/tls/TransportSecurityUtils.java
index e93b880b085..f07924f3ce9 100644
--- a/security-utils/src/main/java/com/yahoo/security/tls/TransportSecurityUtils.java
+++ b/security-utils/src/main/java/com/yahoo/security/tls/TransportSecurityUtils.java
@@ -14,6 +14,7 @@ public class TransportSecurityUtils {
 
     public static final String CONFIG_FILE_ENVIRONMENT_VARIABLE = "VESPA_TLS_CONFIG_FILE";
     public static final String INSECURE_MIXED_MODE_ENVIRONMENT_VARIABLE = "VESPA_TLS_INSECURE_MIXED_MODE";
+    public static final String INSECURE_AUTHORIZATION_MODE_ENVIRONMENT_VARIABLE = "VESPA_TLS_INSECURE_AUTHORIZATION_MODE";
 
     private TransportSecurityUtils() {}
 
@@ -31,6 +32,12 @@ public class TransportSecurityUtils {
                 .map(MixedMode::fromConfigValue);
     }
 
+    public static Optional<AuthorizationMode> getInsecureAuthorizationMode() {
+        if (!isInsecureMixedModeEnabled()) return Optional.empty();
+        return getEnvironmentVariable(INSECURE_AUTHORIZATION_MODE_ENVIRONMENT_VARIABLE)
+                .map(AuthorizationMode::fromConfigValue);
+    }
+
     public static Optional<Path> getConfigFile() {
         return getEnvironmentVariable(CONFIG_FILE_ENVIRONMENT_VARIABLE).map(Paths::get);
     }