Studio Custom Policy Editor (Beta)

<?xml version="1.0" encoding="UTF-8"?>
<policy xmlns="http://www.mulesoft.org/schema/mule/policy"
        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
        xmlns:spring="http://www.springframework.org/schema/beans"
        xmlns:mule="http://www.mulesoft.org/schema/mule/core"
        xmlns:mule-ss="http://www.mulesoft.org/schema/mule/spring-security"
        xmlns:ss="http://www.springframework.org/schema/security"
        xmlns:api-platform-gw="http://www.mulesoft.org/schema/mule/api-platform-gw"
        xsi:schemaLocation="http://www.mulesoft.org/schema/mule/policy http://www.mulesoft.org/schema/mule/policy/current/mule-policy.xsd
              http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-current.xsd
              http://www.mulesoft.org/schema/mule/spring-security http://www.mulesoft.org/schema/mule/spring-security/current/mule-spring-security.xsd
              http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-current.xsd
              http://www.mulesoft.org/schema/mule/api-platform-gw http://www.mulesoft.org/schema/mule/api-platform-gw/current/mule-api-platform-gw.xsd
              http://www.mulesoft.org/schema/mule/core http://www.mulesoft.org/schema/mule/core/current/mule.xsd">

    <pointcut>
        <api-platform-gw:api-pointcut apiName="{{ apiName }}" apiVersion="{{ apiVersionName }}"/>
    </pointcut>

    <before>
        <mule:set-variable variableName="evaluated" value="{{ query }}" />

        <mule:message-filter onUnaccepted="policyViolation">
            <mule:expression-filter expression="#[!evaluated]" />
        </mule:message-filter>
    </before>

    <after>
        <mule:set-property propertyName="Custom-Header" value="Example Policy" />
    </after>

    <mule:processor-chain name="policyViolation">
        <mule:logger message="The custom policy filtered the message #[message.getId()] based on a MEL query" level="DEBUG" />
        <mule:set-property propertyName="http.status" value="403"/>
        <mule:set-property propertyName="Content-Type" value="application/json"/>
        <mule:set-payload value='{ "error" : "Custom Policy: {{ denied-message }}"}'/>
    </mule:processor-chain>
</policy>

name: Custom Policy Example
description: Specifies an MEL *query* expression which when evaluated against incoming messages and returning true, rejects the incoming message.
category: Security
standalone: true
providedCharacteristics: [Message protection]
requiredCharacteristics: []

configuration:
  - propertyName: query
    name: MEL query
    description: MEL query expression to filter incoming requests
    type: expression
    optional: false
    defaultValue: "#[message.inboundProperties['http.method'] == 'POST']"
  - propertyName: denied-message
    name: Rejection message
    description: A message to display when an incoming message is filtered
    type: string
    defaultValue: Access denied
    optional: false