authorizer

Documentation

Index

• type AuthParams
  • func (a AuthParams) IdentityContext() *api.IdentityContext
  • func (a AuthParams) ResourceContext() (*structpb.Struct, error)
• type DecisionTreeCmd
  • func (cmd *DecisionTreeCmd) Run(c *cc.CommonCtx) error
• type EvalDecisionCmd
  • func (cmd *EvalDecisionCmd) Run(c *cc.CommonCtx) error
• type ExecQueryCmd
  • func (cmd *ExecQueryCmd) Run(c *cc.CommonCtx) error
• type IdentityType

Types

type AuthParams

type AuthParams struct {
	Identity     string       `name:"identity" help:"caller identity" default:""`
	IdentityType IdentityType `name:"identity-type" enum:"sub,jwt,none" help:"type of identity [sub|jwt|none]"  default:"none"`
	Resource     string       `name:"resource" help:"a JSON object to include as resource context"`
	PolicyID     string       `name:"policy-id" required:"" help:"policy id"`
}

func (AuthParams) IdentityContext

func (a AuthParams) IdentityContext() *api.IdentityContext

func (AuthParams) ResourceContext

func (a AuthParams) ResourceContext() (*structpb.Struct, error)

type DecisionTreeCmd

type DecisionTreeCmd struct {
	AuthParams `embed:""`
	Path       string   `name:"path" help:"policy package to evaluate"`
	Decisions  []string `name:"decisions" default:"*" help:"policy decisions to return"`
}

func (*DecisionTreeCmd) Run

func (cmd *DecisionTreeCmd) Run(c *cc.CommonCtx) error

type EvalDecisionCmd

type EvalDecisionCmd struct {
	AuthParams `embed:""`
	Path       string   `name:"path" required:"" help:"policy package to evaluate"`
	Decisions  []string `name:"decisions" required:"" help:"policy decisions to return"`
}

func (*EvalDecisionCmd) Run

func (cmd *EvalDecisionCmd) Run(c *cc.CommonCtx) error

type ExecQueryCmd

type ExecQueryCmd struct {
	AuthParams `embed:""`
	Statement  string `arg:"stmt" name:"stmt" required:"" help:"query statement"`
	Path       string `name:"path" help:"policy package to evaluate"`
	Input      string `name:"input" help:"query input context"`
}

func (*ExecQueryCmd) Run

func (cmd *ExecQueryCmd) Run(c *cc.CommonCtx) error

type IdentityType

type IdentityType string

const (
	IdentityTypeNone IdentityType = "none"
	IdentityTypeSub  IdentityType = "sub"
	IdentityTypeJwt  IdentityType = "jwt"
)