--log-level=debug \
           --set=decision_logs.console=true
```

### 2. Create a sample OPA Policy

In another terminal, create a policy that allows root user all access and for all other users denies `PutObject`:

```sh
cat > example.rego <<EOF
package httpapi.authz

import input

default allow = false

# Allow the root user to perform any action.
allow {
 input.owner == true
}

following JWT claims, `policy` claim is mandatory and should be present as part of your JWT claim. Without this claim the generated credentials will not have access to any resources on the server, using these credentials application would receive 'Access Denied' errors.

| Claim Name | Type                                              | Claim Value                                                                                                                                                      ...

     */
    @Test
    @DisplayName("toString contains class name and message")
    void toString_containsClassAndMessage() {
        // Arrange
        String msg = "login denied";
        SmbAuthException ex = new SmbAuthException(msg);

        // Act
        String s = ex.toString();

        // Assert
        assertNotNull(s);

        /** Network-related errors (connection, timeout, etc.) */
        NETWORK,
        /** Authentication and authorization errors */
        AUTHENTICATION,
        /** File system errors (not found, access denied, etc.) */
        FILE_SYSTEM,
        /** Protocol errors (invalid message, unsupported operation, etc.) */
        PROTOCOL,
        /** Resource errors (out of memory, disk space, etc.) */
        RESOURCE,

                    "HTTPValidationError": {
                        "properties": {
                            "detail": {
                                "items": {
                                    "$ref": "#/components/schemas/ValidationError",
                                },
                                "title": "Detail",
                                "type": "array",
                            },
                        },

# | NUMERIC       | java.math.BigDecimal | decimal?      |
# | DECIMAL       | java.math.BigDecimal | decimal?      |
# | TINYINT       | java.lang.Integer    | int?          |
# | SMALLINT      | java.lang.Integer    | int?          |
# | INTEGER       | java.lang.Integer    | int?          |
# | BIGINT        | java.lang.Long       | long?         |
# | REAL          | java.math.BigDecimal | decimal?      |

    private Throwable rootCause;

    /**
     * Constructs a new TransportException with no detail message.
     */
    public TransportException() {
    }

    /**
     * Constructs a new TransportException with the specified detail message.
     *
     * @param msg the detail message
     */
    public TransportException(final String msg) {
        super(msg);
    }

    /**

    )
    assert response.status_code == 404
    assert response.json() == {"detail": "Item not found"}


def test_items_plumbus_with_no_token(client: TestClient):
    response = client.get(
        "/items/plumbus", headers={"X-Token": "fake-super-secret-token"}
    )
    assert response.status_code == 422
    assert response.json() == {
        "detail": [
            {
                "type": "missing",

    private static final long serialVersionUID = -4591854684249021395L;

    /**
     * Constructs a new SpnegoException with no detail message
     */
    public SpnegoException() {
    }

    /**
     * Constructs a new SpnegoException with the specified detail message and cause
     * @param message the detail message
     * @param cause the cause of this exception
     */

    /**
     * Constructs a new RequestTimeoutException with no detail message.
     */
    public RequestTimeoutException() {
    }

    /**
     * Constructs a new RequestTimeoutException with the specified detail message and cause.
     *
     * @param msg the detail message
     * @param rootCause the cause of the exception
     */