Package org.apache.polaris.service.events

Class DefaultEventSanitizer

java.lang.Object

org.apache.polaris.service.events.DefaultEventSanitizer

All Implemented Interfaces:

EventSanitizer

@ApplicationScoped
public class DefaultEventSanitizer
extends Object
implements EventSanitizer

Default implementation of EventSanitizer. Drops attributes whose keys are on the denylist and derives safe attributes (e.g., CATALOG_NAME extracted from a denied CATALOG object) from the originals. The built-in denylist covers attributes that carry credentials or internal secrets and may be extended via polaris.event-listener.denylisted-attributes.

Operators who need a different denial or derivation policy should replace this bean.

Method Summary

Modifier and Type	Method	Description
static Set<AttributeKey<?>>	resolveAdditionalDenylist(Set<String> configuredNames)
PolarisEvent	sanitize(PolarisEvent event)	Returns a sanitized copy of event.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Details

sanitize

public PolarisEvent sanitize(PolarisEvent event)

Description copied from interface: EventSanitizer

Returns a sanitized copy of event. The original event is not modified. The returned event MUST be safe to deliver to all listeners that have not opted in via RawEventAccess.

Specified by:

sanitize in interface EventSanitizer

resolveAdditionalDenylist

public static Set<AttributeKey<?>> resolveAdditionalDenylist(Set<String> configuredNames)