authz

Documentation

Index

• type Config
• type ExtAuthZFilter
  • func NewExtAuthZFilter(config Config, c *client.OpenFgaClient, logger logger.Logger) *ExtAuthZFilter
  • func (e ExtAuthZFilter) Check(ctx context.Context, req *envoy.CheckRequest) (response *envoy.CheckResponse, err error)
  • func (e ExtAuthZFilter) Register(server *grpc.Server)
• type NoopFilter
  • func (e NoopFilter) Check(ctx context.Context, req *envoy.CheckRequest) (response *envoy.CheckResponse, err error)
  • func (e NoopFilter) Register(server *grpc.Server)

Types

type Config

type Config struct {
	Enforce        bool
	ExtractionKits []extractor.ExtractorKit
}

type ExtAuthZFilter

type ExtAuthZFilter struct {
	// contains filtered or unexported fields
}

ExtAuthZFilter is an implementation of the Envoy AuthZ filter.

func NewExtAuthZFilter

func NewExtAuthZFilter(config Config, c *client.OpenFgaClient, logger logger.Logger) *ExtAuthZFilter

NewExtAuthZFilter creates a new ExtAuthZFilter

func (ExtAuthZFilter) Check

func (e ExtAuthZFilter) Check(ctx context.Context, req *envoy.CheckRequest) (response *envoy.CheckResponse, err error)

Check the access decision based on the incoming request

func (ExtAuthZFilter) Register

func (e ExtAuthZFilter) Register(server *grpc.Server)

type NoopFilter

type NoopFilter struct{}

NoopFilter is a noop implementation of the Envoy AuthZ filter.

func (NoopFilter) Check

func (e NoopFilter) Check(ctx context.Context, req *envoy.CheckRequest) (response *envoy.CheckResponse, err error)

func (NoopFilter) Register

func (e NoopFilter) Register(server *grpc.Server)