OFAC API in Java: customer onboarding

{
  "subject": {
    "name": "Mira Calder",
    "entityType": "person",
    "birthDate": "1984"
  },
  "package": "sandbox@1",
  "retention": "standard"
}

<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
  <modelVersion>4.0.0</modelVersion><groupId>example</groupId><artifactId>sanctions-screen</artifactId><version>1.0.0</version>
  <properties><maven.compiler.release>21</maven.compiler.release><project.build.sourceEncoding>UTF-8</project.build.sourceEncoding></properties>
  <dependencies><dependency><groupId>com.fasterxml.jackson.core</groupId><artifactId>jackson-databind</artifactId><version>2.18.10</version></dependency></dependencies>
  <build><plugins>
    <plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-compiler-plugin</artifactId><version>3.13.0</version></plugin>
    <plugin><groupId>org.codehaus.mojo</groupId><artifactId>exec-maven-plugin</artifactId><version>3.5.0</version><configuration><mainClass>Screen</mainClass></configuration></plugin>
  </plugins></build>
</project>

// Java 21+, Jackson 2.x. Backend or trusted CLI. See the adjacent pom.xml.
import com.fasterxml.jackson.databind.JsonNode;
import com.fasterxml.jackson.databind.ObjectMapper;
import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;
import java.nio.file.Files;
import java.nio.file.Path;
import java.time.Duration;
import java.util.Map;
import java.util.concurrent.TimeUnit;

public final class Screen {
    public static void main(String[] args) {
        try { run(args); }
        catch (Exception error) {
            // Parser exceptions may contain excerpts, so do not print their messages.
            System.err.println("Screening incomplete. Check the operation before retrying.");
            System.exit(1);
        }
    }
    static void run(String[] args) throws Exception {
        String key = System.getenv("SANCTIONSKIT_API_KEY");
        String operation = System.getenv("SCREENING_OPERATION_ID");
        if (key == null || operation == null || operation.isBlank()) throw new IllegalArgumentException("Missing configuration");
        byte[] raw = Files.readAllBytes(Path.of(args.length > 0 ? args[0] : "request.json"));
        if (raw.length > 65536) throw new IllegalArgumentException("Oversized request");
        ObjectMapper mapper = new ObjectMapper();
        JsonNode body = mapper.readTree(raw);
        if (body == null || !body.isObject() || !body.has("subject") || body.has("sources") == body.has("package")) {
            throw new IllegalArgumentException("Invalid request object");
        }
        HttpRequest request = HttpRequest.newBuilder(URI.create("https://www.sanctionskit.com/api/v1/screenings"))
            .timeout(Duration.ofSeconds(25))
            .header("Authorization", "Bearer " + key).header("Content-Type", "application/json")
            .header("Idempotency-Key", operation).POST(HttpRequest.BodyPublishers.ofByteArray(raw)).build();
        try (HttpClient client = HttpClient.newBuilder().connectTimeout(Duration.ofSeconds(10))
                .followRedirects(HttpClient.Redirect.NEVER).build()) {
            // A file subscriber avoids buffering the complete body in memory.
            Path temp = Files.createTempFile("sanctions-response-", ".json");
            try {
                var future = client.sendAsync(request, HttpResponse.BodyHandlers.ofFile(temp));
                HttpResponse<Path> response;
                try { response = future.get(30, TimeUnit.SECONDS); }
                catch (Exception error) { future.cancel(true); throw error; }
                if (response.statusCode() < 200 || response.statusCode() >= 300 || Files.size(temp) > 8 * 1024 * 1024) {
                    throw new IllegalStateException("Incomplete HTTP response");
                }
                JsonNode envelope = mapper.readTree(temp.toFile());
                JsonNode data = envelope == null ? null : envelope.get("data");
                if (data == null || !data.isObject() || !data.path("id").isTextual() || data.path("id").asText().isEmpty()
                        || !data.path("status").isTextual() || !data.path("matches").isArray()) {
                    throw new IllegalStateException("Unexpected screening response");
                }
                String status = data.get("status").asText(); int count = data.get("matches").size();
                if (!(status.equals("potential_match") || status.equals("no_match"))
                        || (status.equals("no_match") && count != 0) || (status.equals("potential_match") && count == 0)) {
                    throw new IllegalStateException("Inconsistent screening response");
                }
                System.out.println(mapper.writeValueAsString(Map.of("id", data.get("id").asText(), "status", status, "candidateCount", count)));
            } finally { Files.deleteIfExists(temp); }
        }
    }
}

mvn compile exec:java -Dexec.args="request.json"

curl --fail-with-body --max-time 25 --header "Authorization: Bearer $SANCTIONSKIT_API_KEY" "https://www.sanctionskit.com/api/v1/sources"

{
  "subject": {
    "name": "Mira Calder",
    "entityType": "person",
    "birthDate": "1984"
  },
  "sources": [
    "ofac-sdn"
  ],
  "retention": "standard"
}