policy

Jan 14, 2024

Changes in this version

+ const PackageForwardAuth

+ var ErrInvalidResultType = errors.New("query returned an invalid result type")

+ var ErrNoResults = errors.New("query returned no results")

+ var ErrToManyResults = errors.New("query returned to many results")

+ type Engine struct

+ func NewEngine(ctx context.Context, paths []string, opts ...EngineOption) (*Engine, error)

+ func (engine *Engine) Query(ctx context.Context, query string, input any) (rego.ResultSet, error)

+ func (engine *Engine) QueryOne(ctx context.Context, query string, input any, target any) error

+ type EngineOption func(*option)

+ func WithDebug() EngineOption

+ func WithRawPolicy(path, content string) EngineOption

+ type Store interface

+ GetPrimaryEmailForUserByID func(context.Context, string) (repo.UserEmail, error)

+ GetRolePermissions func(context.Context, string) ([]string, error)

+ GetRolesForToken func(context.Context, string) ([]repo.Role, error)

+ GetRolesForUser func(context.Context, string) ([]repo.Role, error)

+ GetUserByID func(context.Context, string) (repo.User, error)

+ type SubjectInput struct

+ DisplayName string

+ Email string

+ Fields map[string]any

+ ID string

+ Permissions []string

+ Roles []repo.Role

+ TokenKind jwt.LoginKind

+ Username string

+ func NewSubjectInput(ctx context.Context, ds Store, permtree permission.Tree, userID string, ...) (*SubjectInput, error)