protoc-gen-servora-authn

Overview ¶

Command protoc-gen-servora-authn translates servora authn proto annotations into a Go file (`authn_rules.gen.go`) that the runtime can consult to decide which RPC methods are public, and which method requires which authentication schemes.

Merge semantics:

• method-level rule with mode != MODE_UNSPECIFIED replaces the service default in its entirety (schemes from the service default are dropped),
• method-level rule absent (or mode == MODE_UNSPECIFIED) inherits the service-level default,
• if neither is declared, the method does not appear in any output.

Validation (any failure aborts code generation):

• mode == MODE_UNSPECIFIED with non-empty schemes,
• mode == MODE_PUBLIC with non-empty schemes (mutually exclusive),
• mode == MODE_REQUIRED with empty schemes (must specify schemes).