public TokenOwnerAuthzModule(String tokenIdParameter,SSOTokenManager ssoTokenManager,String... allowedActions){
  Reject.ifNull(allowedActions);
  Reject.ifTrue(StringUtils.isEmpty(tokenIdParameter));
  this.ssoTokenManager=ssoTokenManager;
  this.allowedActions=new HashSet<>(Arrays.asList(allowedActions));
  this.tokenIdParameter=tokenIdParameter;
}

public TokenOwnerAuthzModule ( String tokenIdParameter , SSOTokenManager ssoTokenManager , String ... allowedActions ) { Reject . ifNull ( allowedActions ) ; Reject . ifTrue ( StringUtils . isEmpty ( tokenIdParameter ) ) ; this . ssoTokenManager = ssoTokenManager ; this . allowedActions = new HashSet < > ( Arrays . asList ( allowedActions ) ) ; this . tokenIdParameter = tokenIdParameter ; }
creates an authz module that will verify that a tokenid provided by the user ( via query params ) is the same user ( via universal identifier ) as the user requesting the action .
