Adds DateTime Extension Support

[muditchaudhary]

Overview

Adds DateTime Extension Support (RFC 80)

Changes

• Implements new com.cedarpolicy.value.DateTime class

  • Validates input dates against supported format specifications
  • Stores DateTime value in String representation

• Integrates DateTime support in serialization layer

  • Extends ValueSerializer to handle DateTime serialization
  • Adds DateTime deserialization support in ValueDeserializer

• Testing

  • Adds unit tests covering DateTime validation, serialization, and edge cases
  • Includes integration tests to verify end-to-end DateTime functionality

• Updates CHANGELOG

Example Usage

Set<Entity> entities = new HashSet<>();
String principalId = "alice";
Map<String, Value> principalAttributes = new HashMap<>();
principalAttributes.put("DOB", new DateTime("2000-01-01"));
Set<EntityUID> principalParents = new HashSet<>();
Entity principal = new Entity(new EntityUID(principalType, principalId), principalAttributes, principalParents);
entities.add(principal);

String actionId = "view";
Map<String, Value> actionAttributes = new HashMap<>();
Set<EntityUID> actionParents = new HashSet<>();
Entity action = new Entity(new EntityUID(actionType, actionId), actionAttributes, actionParents);
entities.add(action);

String resourceId = "photo.jpg";
Map<String, Value> resourceAttributes = new HashMap<>();
Set<EntityUID> resourceParents = new HashSet<>();
var resource = new Entity(new EntityUID(resourceType, resourceId), resourceAttributes, resourceParents);
entities.add(resource);

String p = "permit(\n"
        + "principal==" + principal.getEUID().toString() + ",\n"
        + "action==" + action.getEUID().toString() + ",\n"
        + "resource==" + resource.getEUID().toString() + "\n"
        + ") when {principal.DOB > datetime(\"1999-01-01\")};";
                
final String policyId = "ID0";
Policy policy = new Policy(p, policyId);
Set<Policy> policies = new HashSet<>();
policies.add(policy);
PolicySet policySet = new PolicySet(policies);
Map<String, Value> currentContext = new HashMap<>();
AuthorizationRequest request = new AuthorizationRequest( principal, action, resource, currentContext);

[mark-creamer-amazon]

Worried about this being valid, but should be fine since dateTime is validated on construction, cannot be mutated externally since it's private and it's set once.

[muditchaudhary]

Yeah. It's final and only assigned after validation so should be ok. This is what we do for IpAddress as well

[mark-creamer-amazon]

Lgtm

[shaobo-he-aws]

LGTM