From 300f433655b288596859cdf0c660b73994e6fcdd Mon Sep 17 00:00:00 2001
From: Andrea Dell'Amico <adellam@isti.cnr.it>
Date: Mon, 12 Dec 2016 12:32:22 +0100
Subject: [PATCH] 
 library/roles/gcube/authorization_service/templates/AuthorizationConfiguration.xml.j2:
 New configuration template.

---
 .../AuthorizationConfiguration.xml.j2         | 20 +++++++++++++++----
 1 file changed, 16 insertions(+), 4 deletions(-)

diff --git a/gcube/authorization_service/templates/AuthorizationConfiguration.xml.j2 b/gcube/authorization_service/templates/AuthorizationConfiguration.xml.j2
index 783c1f1d..269d41c1 100644
--- a/gcube/authorization_service/templates/AuthorizationConfiguration.xml.j2
+++ b/gcube/authorization_service/templates/AuthorizationConfiguration.xml.j2
@@ -4,9 +4,21 @@
     {% for ip in authorized_ips %}
     <Entity type="IP" value="{{ ip }}" />
     {% endfor %}
-        </Rule>
-        <Rule path="/apikey" requiresToken="true"/>
-        <Rule path="/policyManager" requiresToken="true"/>
-        <Rule path="/token/external" requiresToken="true"/>
+  </Rule>
+
+  <Rule path="/apikey" requiresToken="true" acceptedTokenTypes="USER"/>
+  <Rule path="/policyManager" requiresToken="true">
+    {% for ip in authorized_ips %}
+    <Entity type="IP" value="{{ ip }}" />
+    {% endfor %}
+  </Rule>
+  <Rule path="/token/external" requiresToken="true" acceptedTokenTypes="USER" />
+  <Rule path="/token/node" requiresToken="false" />
+  <Rule path="/token/service" requiresToken="true" acceptedTokenTypes="CONTAINER"/>
+  <Rule path="/token/resolve" requiresToken="false">
+    {% for ip in authorized_ips %}
+    <Entity type="IP" value="{{ ip }}" />
+    {% endfor %}
+  </Rule>
 </Configuration>