internal/

Package jwks 提供 Authn 的公共 JWK Set 发布用例。

Package linking 管理已认证用户的 LoginIdentity 绑定与解绑。

Package session 编排 AuthN 用户会话用例门面。

Package signin 编排凭据登录

Package proof 构建认证凭据领域模型 认证凭据是认证的输入，用于认证器进行认证

Package signingkey orchestrates IAM signing-key administration and lifecycle.

Package signup 实现 AuthN 登录身份开通（SignUp / Provision）用例。

Package assignment contains the native role-assignment write use cases.

Package assignmentadmission decides whether a caller may change role assignments.

Package objectattributeadmission defines explicit trust in caller supplied attributes.

Package policypublication publishes accepted authorization facts into the immutable runtime snapshot used for permission decisions.

Package role 角色应用服务

Package iam_authz_generated_swagger Code generated by swaggo/swag.

Package grant establishes the complete online authentication result.

Package signingkey owns non-sensitive signing-key lifecycle rules.

Package token models AuthN tokens and their lifecycle services.

Package authorization owns the domain language and policies used to produce an authorization decision from immutable authorization facts.

Package policy 策略领域包

Package resource 资源领域包

Package role 角色领域包

Package useraccess defines the narrow Identity capabilities exposed to authentication and authorization modules.

Package crypto provides generic authentication cryptography adapters.

Package suggest 从 MySQL 加载档案联想索引项。

Package jwt implements IAM access/service token encoding with JWS compact JWT.

Package keyset adapts signing-key domain facts to cryptographic material, persistence ports, JWS key lookup and public JWKS serialization.

Package assessment contains the QS contract used only by integration tests.

Package authzdb creates disposable databases for authorization contract tests.

Package authzschema provides business independent authorization examples.

Package dto 赋权相关的 DTO 定义

Package handler 角色分配处理器

Package restful IDP 模块 REST API 路由注册

Package handler IDP 模块 REST API 处理器基础

Package request 定义 IDP 模块 REST API 请求结构

Package response 定义 IDP 模块 REST API 响应结构

Package code defines shared error codes used across the iam services.

Package grpc 提供通用的 gRPC 服务器基础设施

定义多个 gin 中间件

Package authz enforces authorization decisions at the HTTP boundary.

Package safelog converts errors into bounded metadata suitable for logs.

Package server 定义了所有平台通用的通用 apiserver