question: public TokenOwnerAuthzModule ( String tokenIdParameter , SSOTokenManager ssoTokenManager , String ... allowedActions ) { Reject . ifNull ( allowedActions ) ; Reject . ifTrue ( StringUtils . isEmpty ( tokenIdParameter ) ) ; this . ssoTokenManager = ssoTokenManager ; this . allowedActions = new HashSet < > ( Arrays . asList ( allowedActions ) ) ; this . tokenIdParameter = tokenIdParameter ; }
target:  Creates an authz module that will verify that a tokenId provided by the user (via query params) is the same user (via universal identifier) as the user requesting the action.