Documentation
¶
Overview ¶
Package authz maps external groups, and the Rauthy clients of calling applications, to application-defined roles and permissions.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type Actor ¶
type Actor struct {
// contains filtered or unexported fields
}
Actor is a permission snapshot. Its zero value grants nothing.
func (Actor) Permissions ¶
type Policy ¶
type Policy struct {
// contains filtered or unexported fields
}
Policy is immutable after construction and safe for concurrent use.
func New ¶
New validates and copies the application's role definitions, the external groups that grant them to people, and the Rauthy client IDs that grant them to calling applications. An application nobody calls passes nil clients.
func (*Policy) Resolve ¶
Resolve ignores unmapped groups. Identity.Roles are deliberately not trusted as application roles. Additional local role assignments must come from trusted code.
func (*Policy) ResolveClient ¶ added in v0.5.0
ResolveClient returns what a calling application, named by its Rauthy client ID, may do. An unlisted client gets nothing.
Source Files