@Override
    public AuthorizationResponse authorize(final AuthorizationRequest request) {
        val resources = findResources(request);
        if (resources.isEmpty()) {
            return AuthorizationResponse.notFound("No authorizable resource can be found");
        }

        for (val resource : resources) {
            for (val authorizer : authorizers) {
                val result = authorizer.evaluate(request, resource);
                if (!result.authorized()) {
                    return AuthorizationResponse.unauthorized(result.reason());
                }
            }
        }
        return AuthorizationResponse.ok();
    }
This is {@link DefaultAuthorizationEngine}.

@author Misagh Moayyed
@since 7.2.0
support/cas-server-support-heimdall/src/main/java/org/apereo/cas/heimdall/engine/DefaultAuthorizationEngine.java