Versions in this module Expand all Collapse all v0 v0.6.0 Jul 11, 2026 Changes in this version + var ErrForbidden = errors.New("authz request is forbidden") + var ErrInvalidRequest = errors.New("invalid authz request") + var ErrUnauthenticated = errors.New("authz principal is unauthenticated") + var ErrUnavailable = errors.New("authz provider is unavailable") + func NewHandler(options Options) (http.Handler, error) + type Authorizer interface + Authorize func(context.Context, Principal, string, string) error + type Capabilities struct + Capabilities []string + Descriptors []CapabilityDescriptor + Health string + MissingRequirements []string + Module string + Provider string + type CapabilityDescriptor struct + Configured bool + Health string + Mode string + Operations []string + Source string + UnsupportedReason string + type Decision struct + Allowed bool + type DecisionRequest struct + Action string + Object string + type Options struct + Authorizer Authorizer + BasePath string + PrincipalResolver PrincipalResolver + Provider Provider + type PolicyRule struct + Action string + Object string + Subject string + type Principal struct + Email string + Role string + Subject string + type PrincipalResolver interface + CurrentPrincipal func(*http.Request) (Principal, error) + type Provider interface + Capabilities func(context.Context, Principal) (Capabilities, error) + Decide func(context.Context, Principal, DecisionRequest) (Decision, error) + Policies func(context.Context, Principal) ([]PolicyRule, error) + RoleAssignments func(context.Context, Principal) ([]RoleAssignment, error) + type RoleAssignment struct + Context string + Role string + Scopes []string + User string