authzv1alpha1

package
v1.19.0 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Apr 4, 2024 License: MIT Imports: 9 Imported by: 1

Documentation

Index

Constants

This section is empty.

Variables

View Source
var (
	Decision_name = map[int32]string{
		0: "DECISION_UNSPECIFIED",
		2: "DECISION_ALLOW",
		4: "DECISION_DENY",
	}
	Decision_value = map[string]int32{
		"DECISION_UNSPECIFIED": 0,
		"DECISION_ALLOW":       2,
		"DECISION_DENY":        4,
	}
)

Enum value maps for Decision.

View Source
var (
	ValidationErrorKind_name = map[int32]string{
		0: "VALIDATION_ERROR_KIND_UNSPECIFIED",
		1: "VALIDATION_ERROR_UNRECOGNIZED_ENTITY_TYPE",
		2: "VALIDATION_ERROR_UNRECOGNIZED_ACTION_ID",
		3: "VALIDATION_ERROR_INVALID_ACTION_APPLICATION",
		4: "VALIDATION_ERROR_TYPE_ERROR",
		5: "VALIDATION_ERROR_UNSPECIFIED_ENTITY",
	}
	ValidationErrorKind_value = map[string]int32{
		"VALIDATION_ERROR_KIND_UNSPECIFIED":           0,
		"VALIDATION_ERROR_UNRECOGNIZED_ENTITY_TYPE":   1,
		"VALIDATION_ERROR_UNRECOGNIZED_ACTION_ID":     2,
		"VALIDATION_ERROR_INVALID_ACTION_APPLICATION": 3,
		"VALIDATION_ERROR_TYPE_ERROR":                 4,
		"VALIDATION_ERROR_UNSPECIFIED_ENTITY":         5,
	}
)

Enum value maps for ValidationErrorKind.

View Source
var (
	ValidationWarningKind_name = map[int32]string{
		0: "VALIDATION_WARNING_KIND_UNSPECIFIED",
		1: "VALIDATION_WARNING_MIXED_SCRIPT_STRING",
		2: "VALIDATION_WARNING_BIDI_CHARS_IN_STRING",
		3: "VALIDATION_WARNING_BIDI_CHARS_IN_IDENTIFIER",
		4: "VALIDATION_WARNING_MIXED_SCRIPT_IDENTIFIER",
		5: "VALIDATION_WARNING_CONFUSABLE_IDENTIFIER",
		6: "VALIDATION_WARNING_ENTITY_DOES_NOT_EXIST",
	}
	ValidationWarningKind_value = map[string]int32{
		"VALIDATION_WARNING_KIND_UNSPECIFIED":         0,
		"VALIDATION_WARNING_MIXED_SCRIPT_STRING":      1,
		"VALIDATION_WARNING_BIDI_CHARS_IN_STRING":     2,
		"VALIDATION_WARNING_BIDI_CHARS_IN_IDENTIFIER": 3,
		"VALIDATION_WARNING_MIXED_SCRIPT_IDENTIFIER":  4,
		"VALIDATION_WARNING_CONFUSABLE_IDENTIFIER":    5,
		"VALIDATION_WARNING_ENTITY_DOES_NOT_EXIST":    6,
	}
)

Enum value maps for ValidationWarningKind.

View Source
var (
	// Denotes the particular RPC as being read-only.
	// This applies a tag during authorization for our authorization audit log.
	//
	// optional bool read_only = 50001;
	E_ReadOnly = &file_commonfate_authz_v1alpha1_read_only_proto_extTypes[0]
)

Extension fields to descriptorpb.MethodOptions.

View Source
var File_commonfate_authz_v1alpha1_authz_proto protoreflect.FileDescriptor
View Source
var File_commonfate_authz_v1alpha1_evaluation_proto protoreflect.FileDescriptor
View Source
var File_commonfate_authz_v1alpha1_health_proto protoreflect.FileDescriptor
View Source
var File_commonfate_authz_v1alpha1_policy_proto protoreflect.FileDescriptor
View Source
var File_commonfate_authz_v1alpha1_read_only_proto protoreflect.FileDescriptor
View Source
var File_commonfate_authz_v1alpha1_request_proto protoreflect.FileDescriptor
View Source
var File_commonfate_authz_v1alpha1_schema_proto protoreflect.FileDescriptor
View Source
var File_commonfate_authz_v1alpha1_validation_proto protoreflect.FileDescriptor

Functions

This section is empty.

Types

type Annotation

type Annotation struct {

	// the ID of the policy with the annotation
	PolicyId string `protobuf:"bytes,1,opt,name=policy_id,json=policyId,proto3" json:"policy_id,omitempty"`
	// the key of the annotation. e.g. in @advice("something")
	// it is 'advice'.
	Key string `protobuf:"bytes,2,opt,name=key,proto3" json:"key,omitempty"`
	// the value of the annotation. e.g. in @advice("something")
	// it is 'something'
	Value string `protobuf:"bytes,3,opt,name=value,proto3" json:"value,omitempty"`
	// contains filtered or unexported fields
}

func (*Annotation) Descriptor deprecated

func (*Annotation) Descriptor() ([]byte, []int)

Deprecated: Use Annotation.ProtoReflect.Descriptor instead.

func (*Annotation) GetKey

func (x *Annotation) GetKey() string

func (*Annotation) GetPolicyId

func (x *Annotation) GetPolicyId() string

func (*Annotation) GetValue

func (x *Annotation) GetValue() string

func (*Annotation) ProtoMessage

func (*Annotation) ProtoMessage()

func (*Annotation) ProtoReflect

func (x *Annotation) ProtoReflect() protoreflect.Message

func (*Annotation) Reset

func (x *Annotation) Reset()

func (*Annotation) String

func (x *Annotation) String() string

type BatchAuthorizeRequest

type BatchAuthorizeRequest struct {
	Requests []*Request `protobuf:"bytes,3,rep,name=requests,proto3" json:"requests,omitempty"`
	// contains filtered or unexported fields
}

func (*BatchAuthorizeRequest) Descriptor deprecated

func (*BatchAuthorizeRequest) Descriptor() ([]byte, []int)

Deprecated: Use BatchAuthorizeRequest.ProtoReflect.Descriptor instead.

func (*BatchAuthorizeRequest) GetRequests

func (x *BatchAuthorizeRequest) GetRequests() []*Request

func (*BatchAuthorizeRequest) ProtoMessage

func (*BatchAuthorizeRequest) ProtoMessage()

func (*BatchAuthorizeRequest) ProtoReflect

func (x *BatchAuthorizeRequest) ProtoReflect() protoreflect.Message

func (*BatchAuthorizeRequest) Reset

func (x *BatchAuthorizeRequest) Reset()

func (*BatchAuthorizeRequest) String

func (x *BatchAuthorizeRequest) String() string

type BatchAuthorizeResponse

type BatchAuthorizeResponse struct {
	Evaluations []*Evaluation `protobuf:"bytes,1,rep,name=evaluations,proto3" json:"evaluations,omitempty"`
	// contains filtered or unexported fields
}

func (*BatchAuthorizeResponse) Descriptor deprecated

func (*BatchAuthorizeResponse) Descriptor() ([]byte, []int)

Deprecated: Use BatchAuthorizeResponse.ProtoReflect.Descriptor instead.

func (*BatchAuthorizeResponse) GetEvaluations

func (x *BatchAuthorizeResponse) GetEvaluations() []*Evaluation

func (*BatchAuthorizeResponse) ProtoMessage

func (*BatchAuthorizeResponse) ProtoMessage()

func (*BatchAuthorizeResponse) ProtoReflect

func (x *BatchAuthorizeResponse) ProtoReflect() protoreflect.Message

func (*BatchAuthorizeResponse) Reset

func (x *BatchAuthorizeResponse) Reset()

func (*BatchAuthorizeResponse) String

func (x *BatchAuthorizeResponse) String() string

type CreatePolicySetRequest

type CreatePolicySetRequest struct {
	PolicySet *PolicySetInput `protobuf:"bytes,1,opt,name=policy_set,json=policySet,proto3" json:"policy_set,omitempty"`
	// contains filtered or unexported fields
}

func (*CreatePolicySetRequest) Descriptor deprecated

func (*CreatePolicySetRequest) Descriptor() ([]byte, []int)

Deprecated: Use CreatePolicySetRequest.ProtoReflect.Descriptor instead.

func (*CreatePolicySetRequest) GetPolicySet

func (x *CreatePolicySetRequest) GetPolicySet() *PolicySetInput

func (*CreatePolicySetRequest) ProtoMessage

func (*CreatePolicySetRequest) ProtoMessage()

func (*CreatePolicySetRequest) ProtoReflect

func (x *CreatePolicySetRequest) ProtoReflect() protoreflect.Message

func (*CreatePolicySetRequest) Reset

func (x *CreatePolicySetRequest) Reset()

func (*CreatePolicySetRequest) String

func (x *CreatePolicySetRequest) String() string

type CreatePolicySetResponse

type CreatePolicySetResponse struct {
	PolicySet *PolicySet `protobuf:"bytes,1,opt,name=policy_set,json=policySet,proto3" json:"policy_set,omitempty"`
	// contains filtered or unexported fields
}

func (*CreatePolicySetResponse) Descriptor deprecated

func (*CreatePolicySetResponse) Descriptor() ([]byte, []int)

Deprecated: Use CreatePolicySetResponse.ProtoReflect.Descriptor instead.

func (*CreatePolicySetResponse) GetPolicySet

func (x *CreatePolicySetResponse) GetPolicySet() *PolicySet

func (*CreatePolicySetResponse) ProtoMessage

func (*CreatePolicySetResponse) ProtoMessage()

func (*CreatePolicySetResponse) ProtoReflect

func (x *CreatePolicySetResponse) ProtoReflect() protoreflect.Message

func (*CreatePolicySetResponse) Reset

func (x *CreatePolicySetResponse) Reset()

func (*CreatePolicySetResponse) String

func (x *CreatePolicySetResponse) String() string

type DebugEvaluation added in v1.10.0

type DebugEvaluation struct {

	// version is used when serializing the DebugEvaluation message in order to ensure
	// forwards-compatibility. Version should be set to '1' when storing DebugEvaluation messages in archival storage.
	Version          uint32            `protobuf:"varint,1,opt,name=version,proto3" json:"version,omitempty"`
	Evaluation       *Evaluation       `protobuf:"bytes,2,opt,name=evaluation,proto3" json:"evaluation,omitempty"`
	DebugInformation *DebugInformation `protobuf:"bytes,3,opt,name=debug_information,json=debugInformation,proto3" json:"debug_information,omitempty"`
	// contains filtered or unexported fields
}

DebugEvaluation contains additional information about a particular authorization evaluation, allowing an administrator to debug the decision and understand why the request was allowed or denied.

func (*DebugEvaluation) Descriptor deprecated added in v1.10.0

func (*DebugEvaluation) Descriptor() ([]byte, []int)

Deprecated: Use DebugEvaluation.ProtoReflect.Descriptor instead.

func (*DebugEvaluation) GetDebugInformation added in v1.10.0

func (x *DebugEvaluation) GetDebugInformation() *DebugInformation

func (*DebugEvaluation) GetEvaluation added in v1.10.0

func (x *DebugEvaluation) GetEvaluation() *Evaluation

func (*DebugEvaluation) GetVersion added in v1.10.0

func (x *DebugEvaluation) GetVersion() uint32

func (*DebugEvaluation) ProtoMessage added in v1.10.0

func (*DebugEvaluation) ProtoMessage()

func (*DebugEvaluation) ProtoReflect added in v1.10.0

func (x *DebugEvaluation) ProtoReflect() protoreflect.Message

func (*DebugEvaluation) Reset added in v1.10.0

func (x *DebugEvaluation) Reset()

func (*DebugEvaluation) String added in v1.10.0

func (x *DebugEvaluation) String() string

type DebugInformation

type DebugInformation struct {

	// PolicySets which contributed to the authorization decision.
	PolicySets []*PolicySet `protobuf:"bytes,1,rep,name=policy_sets,json=policySets,proto3" json:"policy_sets,omitempty"`
	// Entities which contributed to the authorization decision.
	Entities []*v1alpha1.Entity `protobuf:"bytes,2,rep,name=entities,proto3" json:"entities,omitempty"`
	// contains filtered or unexported fields
}

func (*DebugInformation) Descriptor deprecated

func (*DebugInformation) Descriptor() ([]byte, []int)

Deprecated: Use DebugInformation.ProtoReflect.Descriptor instead.

func (*DebugInformation) GetEntities

func (x *DebugInformation) GetEntities() []*v1alpha1.Entity

func (*DebugInformation) GetPolicySets added in v1.10.0

func (x *DebugInformation) GetPolicySets() []*PolicySet

func (*DebugInformation) ProtoMessage

func (*DebugInformation) ProtoMessage()

func (*DebugInformation) ProtoReflect

func (x *DebugInformation) ProtoReflect() protoreflect.Message

func (*DebugInformation) Reset

func (x *DebugInformation) Reset()

func (*DebugInformation) String

func (x *DebugInformation) String() string

type Decision

type Decision int32
const (
	Decision_DECISION_UNSPECIFIED Decision = 0
	// Access is allowed.
	Decision_DECISION_ALLOW Decision = 2
	// Access is denied.
	Decision_DECISION_DENY Decision = 4
)

func (Decision) Descriptor

func (Decision) Descriptor() protoreflect.EnumDescriptor

func (Decision) Enum

func (x Decision) Enum() *Decision

func (Decision) EnumDescriptor deprecated

func (Decision) EnumDescriptor() ([]byte, []int)

Deprecated: Use Decision.Descriptor instead.

func (Decision) Number

func (x Decision) Number() protoreflect.EnumNumber

func (Decision) String

func (x Decision) String() string

func (Decision) Type

type DeletePolicySetRequest

type DeletePolicySetRequest struct {
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// contains filtered or unexported fields
}

func (*DeletePolicySetRequest) Descriptor deprecated

func (*DeletePolicySetRequest) Descriptor() ([]byte, []int)

Deprecated: Use DeletePolicySetRequest.ProtoReflect.Descriptor instead.

func (*DeletePolicySetRequest) GetId

func (x *DeletePolicySetRequest) GetId() string

func (*DeletePolicySetRequest) ProtoMessage

func (*DeletePolicySetRequest) ProtoMessage()

func (*DeletePolicySetRequest) ProtoReflect

func (x *DeletePolicySetRequest) ProtoReflect() protoreflect.Message

func (*DeletePolicySetRequest) Reset

func (x *DeletePolicySetRequest) Reset()

func (*DeletePolicySetRequest) String

func (x *DeletePolicySetRequest) String() string

type DeletePolicySetResponse

type DeletePolicySetResponse struct {
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// contains filtered or unexported fields
}

func (*DeletePolicySetResponse) Descriptor deprecated

func (*DeletePolicySetResponse) Descriptor() ([]byte, []int)

Deprecated: Use DeletePolicySetResponse.ProtoReflect.Descriptor instead.

func (*DeletePolicySetResponse) GetId

func (x *DeletePolicySetResponse) GetId() string

func (*DeletePolicySetResponse) ProtoMessage

func (*DeletePolicySetResponse) ProtoMessage()

func (*DeletePolicySetResponse) ProtoReflect

func (x *DeletePolicySetResponse) ProtoReflect() protoreflect.Message

func (*DeletePolicySetResponse) Reset

func (x *DeletePolicySetResponse) Reset()

func (*DeletePolicySetResponse) String

func (x *DeletePolicySetResponse) String() string

type Diagnostics

type Diagnostics struct {
	Reason      []string      `protobuf:"bytes,1,rep,name=reason,proto3" json:"reason,omitempty"`
	Errors      []string      `protobuf:"bytes,2,rep,name=errors,proto3" json:"errors,omitempty"`
	Annotations []*Annotation `protobuf:"bytes,3,rep,name=annotations,proto3" json:"annotations,omitempty"`
	// contains filtered or unexported fields
}

func (*Diagnostics) Descriptor deprecated

func (*Diagnostics) Descriptor() ([]byte, []int)

Deprecated: Use Diagnostics.ProtoReflect.Descriptor instead.

func (*Diagnostics) GetAnnotations

func (x *Diagnostics) GetAnnotations() []*Annotation

func (*Diagnostics) GetErrors

func (x *Diagnostics) GetErrors() []string

func (*Diagnostics) GetReason

func (x *Diagnostics) GetReason() []string

func (*Diagnostics) ProtoMessage

func (*Diagnostics) ProtoMessage()

func (*Diagnostics) ProtoReflect

func (x *Diagnostics) ProtoReflect() protoreflect.Message

func (*Diagnostics) Reset

func (x *Diagnostics) Reset()

func (*Diagnostics) String

func (x *Diagnostics) String() string

type Evaluation

type Evaluation struct {
	Id          string       `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	Request     *Request     `protobuf:"bytes,2,opt,name=request,proto3" json:"request,omitempty"`
	Decision    Decision     `protobuf:"varint,3,opt,name=decision,proto3,enum=commonfate.authz.v1alpha1.Decision" json:"decision,omitempty"`
	Diagnostics *Diagnostics `protobuf:"bytes,4,opt,name=diagnostics,proto3" json:"diagnostics,omitempty"`
	// The client-side identifier for the request specified in AuthorizationRequest.
	ClientKey   string                 `protobuf:"bytes,5,opt,name=client_key,json=clientKey,proto3" json:"client_key,omitempty"`
	EvaluatedAt *timestamppb.Timestamp `protobuf:"bytes,6,opt,name=evaluated_at,json=evaluatedAt,proto3" json:"evaluated_at,omitempty"`
	// the duration that it took to make the authorization decision
	EvaluationDuration *durationpb.Duration `protobuf:"bytes,7,opt,name=evaluation_duration,json=evaluationDuration,proto3" json:"evaluation_duration,omitempty"`
	// contains filtered or unexported fields
}

func (*Evaluation) Descriptor deprecated

func (*Evaluation) Descriptor() ([]byte, []int)

Deprecated: Use Evaluation.ProtoReflect.Descriptor instead.

func (*Evaluation) GetClientKey

func (x *Evaluation) GetClientKey() string

func (*Evaluation) GetDecision

func (x *Evaluation) GetDecision() Decision

func (*Evaluation) GetDiagnostics

func (x *Evaluation) GetDiagnostics() *Diagnostics

func (*Evaluation) GetEvaluatedAt

func (x *Evaluation) GetEvaluatedAt() *timestamppb.Timestamp

func (*Evaluation) GetEvaluationDuration added in v1.10.0

func (x *Evaluation) GetEvaluationDuration() *durationpb.Duration

func (*Evaluation) GetId

func (x *Evaluation) GetId() string

func (*Evaluation) GetRequest

func (x *Evaluation) GetRequest() *Request

func (*Evaluation) ProtoMessage

func (*Evaluation) ProtoMessage()

func (*Evaluation) ProtoReflect

func (x *Evaluation) ProtoReflect() protoreflect.Message

func (*Evaluation) Reset

func (x *Evaluation) Reset()

func (*Evaluation) String

func (x *Evaluation) String() string

type GetPolicySetRequest

type GetPolicySetRequest struct {

	// The token for the next page.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// contains filtered or unexported fields
}

func (*GetPolicySetRequest) Descriptor deprecated

func (*GetPolicySetRequest) Descriptor() ([]byte, []int)

Deprecated: Use GetPolicySetRequest.ProtoReflect.Descriptor instead.

func (*GetPolicySetRequest) GetId

func (x *GetPolicySetRequest) GetId() string

func (*GetPolicySetRequest) ProtoMessage

func (*GetPolicySetRequest) ProtoMessage()

func (*GetPolicySetRequest) ProtoReflect

func (x *GetPolicySetRequest) ProtoReflect() protoreflect.Message

func (*GetPolicySetRequest) Reset

func (x *GetPolicySetRequest) Reset()

func (*GetPolicySetRequest) String

func (x *GetPolicySetRequest) String() string

type GetPolicySetResponse

type GetPolicySetResponse struct {
	PolicySet *PolicySet `protobuf:"bytes,1,opt,name=policy_set,json=policySet,proto3" json:"policy_set,omitempty"`
	// contains filtered or unexported fields
}

func (*GetPolicySetResponse) Descriptor deprecated

func (*GetPolicySetResponse) Descriptor() ([]byte, []int)

Deprecated: Use GetPolicySetResponse.ProtoReflect.Descriptor instead.

func (*GetPolicySetResponse) GetPolicySet

func (x *GetPolicySetResponse) GetPolicySet() *PolicySet

func (*GetPolicySetResponse) ProtoMessage

func (*GetPolicySetResponse) ProtoMessage()

func (*GetPolicySetResponse) ProtoReflect

func (x *GetPolicySetResponse) ProtoReflect() protoreflect.Message

func (*GetPolicySetResponse) Reset

func (x *GetPolicySetResponse) Reset()

func (*GetPolicySetResponse) String

func (x *GetPolicySetResponse) String() string

type GetSchemaJSONStringRequest added in v1.14.0

type GetSchemaJSONStringRequest struct {
	// contains filtered or unexported fields
}

func (*GetSchemaJSONStringRequest) Descriptor deprecated added in v1.14.0

func (*GetSchemaJSONStringRequest) Descriptor() ([]byte, []int)

Deprecated: Use GetSchemaJSONStringRequest.ProtoReflect.Descriptor instead.

func (*GetSchemaJSONStringRequest) ProtoMessage added in v1.14.0

func (*GetSchemaJSONStringRequest) ProtoMessage()

func (*GetSchemaJSONStringRequest) ProtoReflect added in v1.14.0

func (*GetSchemaJSONStringRequest) Reset added in v1.14.0

func (x *GetSchemaJSONStringRequest) Reset()

func (*GetSchemaJSONStringRequest) String added in v1.14.0

func (x *GetSchemaJSONStringRequest) String() string

type GetSchemaJSONStringResponse added in v1.14.0

type GetSchemaJSONStringResponse struct {
	Schema string `protobuf:"bytes,1,opt,name=schema,proto3" json:"schema,omitempty"`
	// contains filtered or unexported fields
}

func (*GetSchemaJSONStringResponse) Descriptor deprecated added in v1.14.0

func (*GetSchemaJSONStringResponse) Descriptor() ([]byte, []int)

Deprecated: Use GetSchemaJSONStringResponse.ProtoReflect.Descriptor instead.

func (*GetSchemaJSONStringResponse) GetSchema added in v1.14.0

func (x *GetSchemaJSONStringResponse) GetSchema() string

func (*GetSchemaJSONStringResponse) ProtoMessage added in v1.14.0

func (*GetSchemaJSONStringResponse) ProtoMessage()

func (*GetSchemaJSONStringResponse) ProtoReflect added in v1.14.0

func (*GetSchemaJSONStringResponse) Reset added in v1.14.0

func (x *GetSchemaJSONStringResponse) Reset()

func (*GetSchemaJSONStringResponse) String added in v1.14.0

func (x *GetSchemaJSONStringResponse) String() string

type HealthCheckRequest

type HealthCheckRequest struct {
	// contains filtered or unexported fields
}

func (*HealthCheckRequest) Descriptor deprecated

func (*HealthCheckRequest) Descriptor() ([]byte, []int)

Deprecated: Use HealthCheckRequest.ProtoReflect.Descriptor instead.

func (*HealthCheckRequest) ProtoMessage

func (*HealthCheckRequest) ProtoMessage()

func (*HealthCheckRequest) ProtoReflect

func (x *HealthCheckRequest) ProtoReflect() protoreflect.Message

func (*HealthCheckRequest) Reset

func (x *HealthCheckRequest) Reset()

func (*HealthCheckRequest) String

func (x *HealthCheckRequest) String() string

type HealthCheckResponse

type HealthCheckResponse struct {
	// contains filtered or unexported fields
}

func (*HealthCheckResponse) Descriptor deprecated

func (*HealthCheckResponse) Descriptor() ([]byte, []int)

Deprecated: Use HealthCheckResponse.ProtoReflect.Descriptor instead.

func (*HealthCheckResponse) ProtoMessage

func (*HealthCheckResponse) ProtoMessage()

func (*HealthCheckResponse) ProtoReflect

func (x *HealthCheckResponse) ProtoReflect() protoreflect.Message

func (*HealthCheckResponse) Reset

func (x *HealthCheckResponse) Reset()

func (*HealthCheckResponse) String

func (x *HealthCheckResponse) String() string

type ListPolicySetsRequest

type ListPolicySetsRequest struct {

	// The token for the next page.
	PageToken string `protobuf:"bytes,4,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// contains filtered or unexported fields
}

func (*ListPolicySetsRequest) Descriptor deprecated

func (*ListPolicySetsRequest) Descriptor() ([]byte, []int)

Deprecated: Use ListPolicySetsRequest.ProtoReflect.Descriptor instead.

func (*ListPolicySetsRequest) GetPageToken

func (x *ListPolicySetsRequest) GetPageToken() string

func (*ListPolicySetsRequest) ProtoMessage

func (*ListPolicySetsRequest) ProtoMessage()

func (*ListPolicySetsRequest) ProtoReflect

func (x *ListPolicySetsRequest) ProtoReflect() protoreflect.Message

func (*ListPolicySetsRequest) Reset

func (x *ListPolicySetsRequest) Reset()

func (*ListPolicySetsRequest) String

func (x *ListPolicySetsRequest) String() string

type ListPolicySetsResponse

type ListPolicySetsResponse struct {
	PolicySets    []*PolicySet `protobuf:"bytes,1,rep,name=policy_sets,json=policySets,proto3" json:"policy_sets,omitempty"`
	NextPageToken string       `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

func (*ListPolicySetsResponse) Descriptor deprecated

func (*ListPolicySetsResponse) Descriptor() ([]byte, []int)

Deprecated: Use ListPolicySetsResponse.ProtoReflect.Descriptor instead.

func (*ListPolicySetsResponse) GetNextPageToken

func (x *ListPolicySetsResponse) GetNextPageToken() string

func (*ListPolicySetsResponse) GetPolicySets

func (x *ListPolicySetsResponse) GetPolicySets() []*PolicySet

func (*ListPolicySetsResponse) ProtoMessage

func (*ListPolicySetsResponse) ProtoMessage()

func (*ListPolicySetsResponse) ProtoReflect

func (x *ListPolicySetsResponse) ProtoReflect() protoreflect.Message

func (*ListPolicySetsResponse) Reset

func (x *ListPolicySetsResponse) Reset()

func (*ListPolicySetsResponse) String

func (x *ListPolicySetsResponse) String() string

type Policy

type Policy struct {

	// ID of the policy.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// Cedar code for the policy set.
	Text string `protobuf:"bytes,2,opt,name=text,proto3" json:"text,omitempty"`
	// contains filtered or unexported fields
}

func (*Policy) Descriptor deprecated

func (*Policy) Descriptor() ([]byte, []int)

Deprecated: Use Policy.ProtoReflect.Descriptor instead.

func (*Policy) GetId

func (x *Policy) GetId() string

func (*Policy) GetText

func (x *Policy) GetText() string

func (*Policy) ProtoMessage

func (*Policy) ProtoMessage()

func (*Policy) ProtoReflect

func (x *Policy) ProtoReflect() protoreflect.Message

func (*Policy) Reset

func (x *Policy) Reset()

func (*Policy) String

func (x *Policy) String() string

type PolicySet

type PolicySet struct {

	// ID of the policy set.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// The policies contained in the policy set.
	Policies []*Policy `protobuf:"bytes,2,rep,name=policies,proto3" json:"policies,omitempty"`
	// The source code for the policy set.
	Text string `protobuf:"bytes,3,opt,name=text,proto3" json:"text,omitempty"`
	// contains filtered or unexported fields
}

func (*PolicySet) Descriptor deprecated

func (*PolicySet) Descriptor() ([]byte, []int)

Deprecated: Use PolicySet.ProtoReflect.Descriptor instead.

func (*PolicySet) GetId

func (x *PolicySet) GetId() string

func (*PolicySet) GetPolicies

func (x *PolicySet) GetPolicies() []*Policy

func (*PolicySet) GetText

func (x *PolicySet) GetText() string

func (*PolicySet) ProtoMessage

func (*PolicySet) ProtoMessage()

func (*PolicySet) ProtoReflect

func (x *PolicySet) ProtoReflect() protoreflect.Message

func (*PolicySet) Reset

func (x *PolicySet) Reset()

func (*PolicySet) String

func (x *PolicySet) String() string

type PolicySetInput

type PolicySetInput struct {

	// ID of the policy.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// Cedar code for the policy set.
	Text string `protobuf:"bytes,2,opt,name=text,proto3" json:"text,omitempty"`
	// contains filtered or unexported fields
}

func (*PolicySetInput) Descriptor deprecated

func (*PolicySetInput) Descriptor() ([]byte, []int)

Deprecated: Use PolicySetInput.ProtoReflect.Descriptor instead.

func (*PolicySetInput) GetId

func (x *PolicySetInput) GetId() string

func (*PolicySetInput) GetText

func (x *PolicySetInput) GetText() string

func (*PolicySetInput) ProtoMessage

func (*PolicySetInput) ProtoMessage()

func (*PolicySetInput) ProtoReflect

func (x *PolicySetInput) ProtoReflect() protoreflect.Message

func (*PolicySetInput) Reset

func (x *PolicySetInput) Reset()

func (*PolicySetInput) String

func (x *PolicySetInput) String() string

type Request

type Request struct {
	Principal *v1alpha1.EID `protobuf:"bytes,1,opt,name=principal,proto3" json:"principal,omitempty"`
	Action    *v1alpha1.EID `protobuf:"bytes,2,opt,name=action,proto3" json:"action,omitempty"`
	Resource  *v1alpha1.EID `protobuf:"bytes,3,opt,name=resource,proto3" json:"resource,omitempty"`
	// A client side identifier for the authorization request.
	// The client_key will be included in the corresponding evaluation for the
	// particular request made.
	//
	// Useful when calling BatchAuthorize to match the evaluations with the requests.
	ClientKey string `protobuf:"bytes,4,opt,name=client_key,json=clientKey,proto3" json:"client_key,omitempty"`
	// Entities to 'overlay' temporarily on the entities stored in the authz service.
	OverlayEntities []*v1alpha1.Entity `protobuf:"bytes,5,rep,name=overlay_entities,json=overlayEntities,proto3" json:"overlay_entities,omitempty"`
	// Parent/child relationships to 'overlay' temporarily on the entities stored in the authz service.
	OverlayChildren []*v1alpha1.ChildRelation `protobuf:"bytes,6,rep,name=overlay_children,json=overlayChildren,proto3" json:"overlay_children,omitempty"`
	// Tags associated with the authorization evaluation.
	// Common Fate uses this to add attributes like the Access Request ID
	// to the evaluation.
	//
	// Tags are *not* used to make authorization decisions but rather is used to aid in observability
	// and debugging of authorization decisions.
	Tags []*Tag `protobuf:"bytes,8,rep,name=tags,proto3" json:"tags,omitempty"`
	// contains filtered or unexported fields
}

func (*Request) Descriptor deprecated

func (*Request) Descriptor() ([]byte, []int)

Deprecated: Use Request.ProtoReflect.Descriptor instead.

func (*Request) GetAction

func (x *Request) GetAction() *v1alpha1.EID

func (*Request) GetClientKey

func (x *Request) GetClientKey() string

func (*Request) GetOverlayChildren

func (x *Request) GetOverlayChildren() []*v1alpha1.ChildRelation

func (*Request) GetOverlayEntities

func (x *Request) GetOverlayEntities() []*v1alpha1.Entity

func (*Request) GetPrincipal

func (x *Request) GetPrincipal() *v1alpha1.EID

func (*Request) GetResource

func (x *Request) GetResource() *v1alpha1.EID

func (*Request) GetTags added in v1.12.0

func (x *Request) GetTags() []*Tag

func (*Request) ProtoMessage

func (*Request) ProtoMessage()

func (*Request) ProtoReflect

func (x *Request) ProtoReflect() protoreflect.Message

func (*Request) Reset

func (x *Request) Reset()

func (*Request) String

func (x *Request) String() string

type SourceRange added in v1.14.0

type SourceRange struct {
	Start uint32 `protobuf:"varint,1,opt,name=start,proto3" json:"start,omitempty"`
	End   uint32 `protobuf:"varint,2,opt,name=end,proto3" json:"end,omitempty"`
	// contains filtered or unexported fields
}

The range in the policy definition which contains the error

func (*SourceRange) Descriptor deprecated added in v1.14.0

func (*SourceRange) Descriptor() ([]byte, []int)

Deprecated: Use SourceRange.ProtoReflect.Descriptor instead.

func (*SourceRange) GetEnd added in v1.14.0

func (x *SourceRange) GetEnd() uint32

func (*SourceRange) GetStart added in v1.14.0

func (x *SourceRange) GetStart() uint32

func (*SourceRange) ProtoMessage added in v1.14.0

func (*SourceRange) ProtoMessage()

func (*SourceRange) ProtoReflect added in v1.14.0

func (x *SourceRange) ProtoReflect() protoreflect.Message

func (*SourceRange) Reset added in v1.14.0

func (x *SourceRange) Reset()

func (*SourceRange) String added in v1.14.0

func (x *SourceRange) String() string

type Tag added in v1.12.0

type Tag struct {
	Key   string `protobuf:"bytes,1,opt,name=key,proto3" json:"key,omitempty"`
	Value string `protobuf:"bytes,2,opt,name=value,proto3" json:"value,omitempty"`
	// contains filtered or unexported fields
}

func (*Tag) Descriptor deprecated added in v1.12.0

func (*Tag) Descriptor() ([]byte, []int)

Deprecated: Use Tag.ProtoReflect.Descriptor instead.

func (*Tag) GetKey added in v1.12.0

func (x *Tag) GetKey() string

func (*Tag) GetValue added in v1.12.0

func (x *Tag) GetValue() string

func (*Tag) ProtoMessage added in v1.12.0

func (*Tag) ProtoMessage()

func (*Tag) ProtoReflect added in v1.12.0

func (x *Tag) ProtoReflect() protoreflect.Message

func (*Tag) Reset added in v1.12.0

func (x *Tag) Reset()

func (*Tag) String added in v1.12.0

func (x *Tag) String() string

type UpdatePolicySetRequest

type UpdatePolicySetRequest struct {
	PolicySet *PolicySetInput `protobuf:"bytes,1,opt,name=policy_set,json=policySet,proto3" json:"policy_set,omitempty"`
	// contains filtered or unexported fields
}

func (*UpdatePolicySetRequest) Descriptor deprecated

func (*UpdatePolicySetRequest) Descriptor() ([]byte, []int)

Deprecated: Use UpdatePolicySetRequest.ProtoReflect.Descriptor instead.

func (*UpdatePolicySetRequest) GetPolicySet

func (x *UpdatePolicySetRequest) GetPolicySet() *PolicySetInput

func (*UpdatePolicySetRequest) ProtoMessage

func (*UpdatePolicySetRequest) ProtoMessage()

func (*UpdatePolicySetRequest) ProtoReflect

func (x *UpdatePolicySetRequest) ProtoReflect() protoreflect.Message

func (*UpdatePolicySetRequest) Reset

func (x *UpdatePolicySetRequest) Reset()

func (*UpdatePolicySetRequest) String

func (x *UpdatePolicySetRequest) String() string

type UpdatePolicySetResponse

type UpdatePolicySetResponse struct {
	PolicySet *PolicySet `protobuf:"bytes,1,opt,name=policy_set,json=policySet,proto3" json:"policy_set,omitempty"`
	// contains filtered or unexported fields
}

func (*UpdatePolicySetResponse) Descriptor deprecated

func (*UpdatePolicySetResponse) Descriptor() ([]byte, []int)

Deprecated: Use UpdatePolicySetResponse.ProtoReflect.Descriptor instead.

func (*UpdatePolicySetResponse) GetPolicySet

func (x *UpdatePolicySetResponse) GetPolicySet() *PolicySet

func (*UpdatePolicySetResponse) ProtoMessage

func (*UpdatePolicySetResponse) ProtoMessage()

func (*UpdatePolicySetResponse) ProtoReflect

func (x *UpdatePolicySetResponse) ProtoReflect() protoreflect.Message

func (*UpdatePolicySetResponse) Reset

func (x *UpdatePolicySetResponse) Reset()

func (*UpdatePolicySetResponse) String

func (x *UpdatePolicySetResponse) String() string

type ValidatePolicySetTextRequest added in v1.14.0

type ValidatePolicySetTextRequest struct {
	PolicySetText string `protobuf:"bytes,1,opt,name=policy_set_text,json=policySetText,proto3" json:"policy_set_text,omitempty"`
	// contains filtered or unexported fields
}

func (*ValidatePolicySetTextRequest) Descriptor deprecated added in v1.14.0

func (*ValidatePolicySetTextRequest) Descriptor() ([]byte, []int)

Deprecated: Use ValidatePolicySetTextRequest.ProtoReflect.Descriptor instead.

func (*ValidatePolicySetTextRequest) GetPolicySetText added in v1.14.0

func (x *ValidatePolicySetTextRequest) GetPolicySetText() string

func (*ValidatePolicySetTextRequest) ProtoMessage added in v1.14.0

func (*ValidatePolicySetTextRequest) ProtoMessage()

func (*ValidatePolicySetTextRequest) ProtoReflect added in v1.14.0

func (*ValidatePolicySetTextRequest) Reset added in v1.14.0

func (x *ValidatePolicySetTextRequest) Reset()

func (*ValidatePolicySetTextRequest) String added in v1.14.0

type ValidatePolicySetTextResponse added in v1.14.0

type ValidatePolicySetTextResponse struct {
	Result *ValidationResult `protobuf:"bytes,1,opt,name=result,proto3" json:"result,omitempty"`
	// contains filtered or unexported fields
}

func (*ValidatePolicySetTextResponse) Descriptor deprecated added in v1.14.0

func (*ValidatePolicySetTextResponse) Descriptor() ([]byte, []int)

Deprecated: Use ValidatePolicySetTextResponse.ProtoReflect.Descriptor instead.

func (*ValidatePolicySetTextResponse) GetResult added in v1.14.0

func (*ValidatePolicySetTextResponse) ProtoMessage added in v1.14.0

func (*ValidatePolicySetTextResponse) ProtoMessage()

func (*ValidatePolicySetTextResponse) ProtoReflect added in v1.14.0

func (*ValidatePolicySetTextResponse) Reset added in v1.14.0

func (x *ValidatePolicySetTextResponse) Reset()

func (*ValidatePolicySetTextResponse) String added in v1.14.0

type ValidationError added in v1.14.0

type ValidationError struct {
	PolicyId string `protobuf:"bytes,1,opt,name=policy_id,json=policyId,proto3" json:"policy_id,omitempty"`
	Message  string `protobuf:"bytes,2,opt,name=message,proto3" json:"message,omitempty"`
	// contains filtered or unexported fields
}

func (*ValidationError) Descriptor deprecated added in v1.14.0

func (*ValidationError) Descriptor() ([]byte, []int)

Deprecated: Use ValidationError.ProtoReflect.Descriptor instead.

func (*ValidationError) GetMessage added in v1.14.0

func (x *ValidationError) GetMessage() string

func (*ValidationError) GetPolicyId added in v1.14.0

func (x *ValidationError) GetPolicyId() string

func (*ValidationError) ProtoMessage added in v1.14.0

func (*ValidationError) ProtoMessage()

func (*ValidationError) ProtoReflect added in v1.14.0

func (x *ValidationError) ProtoReflect() protoreflect.Message

func (*ValidationError) Reset added in v1.14.0

func (x *ValidationError) Reset()

func (*ValidationError) String added in v1.14.0

func (x *ValidationError) String() string

type ValidationErrorKind added in v1.14.0

type ValidationErrorKind int32
const (
	ValidationErrorKind_VALIDATION_ERROR_KIND_UNSPECIFIED ValidationErrorKind = 0
	// A policy contains an entity type that is not declared in the schema.
	ValidationErrorKind_VALIDATION_ERROR_UNRECOGNIZED_ENTITY_TYPE ValidationErrorKind = 1
	// A policy contains an action that is not declared in the schema.
	ValidationErrorKind_VALIDATION_ERROR_UNRECOGNIZED_ACTION_ID ValidationErrorKind = 2
	// There is no action satisfying the action head constraint that can be
	// applied to a principal and resources that both satisfy their respective
	// head conditions.
	ValidationErrorKind_VALIDATION_ERROR_INVALID_ACTION_APPLICATION ValidationErrorKind = 3
	// The type checker found an error.
	ValidationErrorKind_VALIDATION_ERROR_TYPE_ERROR ValidationErrorKind = 4
	// An unspecified entity was used in a policy.
	ValidationErrorKind_VALIDATION_ERROR_UNSPECIFIED_ENTITY ValidationErrorKind = 5
)

func (ValidationErrorKind) Descriptor added in v1.14.0

func (ValidationErrorKind) Enum added in v1.14.0

func (ValidationErrorKind) EnumDescriptor deprecated added in v1.14.0

func (ValidationErrorKind) EnumDescriptor() ([]byte, []int)

Deprecated: Use ValidationErrorKind.Descriptor instead.

func (ValidationErrorKind) Number added in v1.14.0

func (ValidationErrorKind) String added in v1.14.0

func (x ValidationErrorKind) String() string

func (ValidationErrorKind) Type added in v1.14.0

type ValidationResult added in v1.14.0

type ValidationResult struct {
	Errors   []*ValidationError   `protobuf:"bytes,1,rep,name=errors,proto3" json:"errors,omitempty"`
	Warnings []*ValidationWarning `protobuf:"bytes,2,rep,name=warnings,proto3" json:"warnings,omitempty"`
	// contains filtered or unexported fields
}

func (*ValidationResult) Descriptor deprecated added in v1.14.0

func (*ValidationResult) Descriptor() ([]byte, []int)

Deprecated: Use ValidationResult.ProtoReflect.Descriptor instead.

func (*ValidationResult) GetErrors added in v1.14.0

func (x *ValidationResult) GetErrors() []*ValidationError

func (*ValidationResult) GetWarnings added in v1.14.0

func (x *ValidationResult) GetWarnings() []*ValidationWarning

func (*ValidationResult) ProtoMessage added in v1.14.0

func (*ValidationResult) ProtoMessage()

func (*ValidationResult) ProtoReflect added in v1.14.0

func (x *ValidationResult) ProtoReflect() protoreflect.Message

func (*ValidationResult) Reset added in v1.14.0

func (x *ValidationResult) Reset()

func (*ValidationResult) String added in v1.14.0

func (x *ValidationResult) String() string

type ValidationWarning added in v1.14.0

type ValidationWarning struct {
	PolicyId string `protobuf:"bytes,1,opt,name=policy_id,json=policyId,proto3" json:"policy_id,omitempty"`
	Message  string `protobuf:"bytes,2,opt,name=message,proto3" json:"message,omitempty"`
	// contains filtered or unexported fields
}

func (*ValidationWarning) Descriptor deprecated added in v1.14.0

func (*ValidationWarning) Descriptor() ([]byte, []int)

Deprecated: Use ValidationWarning.ProtoReflect.Descriptor instead.

func (*ValidationWarning) GetMessage added in v1.14.0

func (x *ValidationWarning) GetMessage() string

func (*ValidationWarning) GetPolicyId added in v1.14.0

func (x *ValidationWarning) GetPolicyId() string

func (*ValidationWarning) ProtoMessage added in v1.14.0

func (*ValidationWarning) ProtoMessage()

func (*ValidationWarning) ProtoReflect added in v1.14.0

func (x *ValidationWarning) ProtoReflect() protoreflect.Message

func (*ValidationWarning) Reset added in v1.14.0

func (x *ValidationWarning) Reset()

func (*ValidationWarning) String added in v1.14.0

func (x *ValidationWarning) String() string

type ValidationWarningKind added in v1.14.0

type ValidationWarningKind int32
const (
	ValidationWarningKind_VALIDATION_WARNING_KIND_UNSPECIFIED ValidationWarningKind = 0
	// A string contains mixed scripts. Different scripts can contain visually similar characters which may be confused for each other.
	ValidationWarningKind_VALIDATION_WARNING_MIXED_SCRIPT_STRING ValidationWarningKind = 1
	// A string contains BIDI control characters. These can be used to create crafted pieces of code that obfuscate true control flow.
	ValidationWarningKind_VALIDATION_WARNING_BIDI_CHARS_IN_STRING ValidationWarningKind = 2
	// An id contains BIDI control characters. These can be used to create crafted pieces of code that obfuscate true control flow.
	ValidationWarningKind_VALIDATION_WARNING_BIDI_CHARS_IN_IDENTIFIER ValidationWarningKind = 3
	// An id contains mixed scripts. This can cause characters to be confused for each other.
	ValidationWarningKind_VALIDATION_WARNING_MIXED_SCRIPT_IDENTIFIER ValidationWarningKind = 4
	// An id contains characters that fall outside of the General Security Profile for Identifiers. We recommend adhering to this if possible. See Unicode® Technical Standard #39 for more info.
	ValidationWarningKind_VALIDATION_WARNING_CONFUSABLE_IDENTIFIER ValidationWarningKind = 5
	// An entity referenced in a policy does not exist.
	ValidationWarningKind_VALIDATION_WARNING_ENTITY_DOES_NOT_EXIST ValidationWarningKind = 6
)

func (ValidationWarningKind) Descriptor added in v1.14.0

func (ValidationWarningKind) Enum added in v1.14.0

func (ValidationWarningKind) EnumDescriptor deprecated added in v1.14.0

func (ValidationWarningKind) EnumDescriptor() ([]byte, []int)

Deprecated: Use ValidationWarningKind.Descriptor instead.

func (ValidationWarningKind) Number added in v1.14.0

func (ValidationWarningKind) String added in v1.14.0

func (x ValidationWarningKind) String() string

func (ValidationWarningKind) Type added in v1.14.0

Directories

Path Synopsis

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL