Documentation
¶
Overview ¶
Package cedar adapts cedar-go policy evaluation to api-toolkit authorization ports.
Use New with a Cedar policy set when an application wants policy-backed authorization through authorization.NewPolicyAuthorizer. The adapter is in the contrib module and remains outside the stable core API promise.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func RecordFromMap ¶
RecordFromMap converts a map into a Cedar record using supported value types.
Types ¶
type Config ¶
type Config struct {
Policies cedarcore.PolicyIterator
Entities cedarcore.EntityGetter
PrincipalType string
ResourceType string
ActionType string
RequestBuilder RequestBuilder
}
Config configures the Cedar adapter.
type Engine ¶
type Engine struct {
// contains filtered or unexported fields
}
Engine evaluates policies using cedar-go.
func (*Engine) Evaluate ¶
func (e *Engine) Evaluate(ctx context.Context, req ports.PolicyRequest) (ports.PolicyDecision, error)
Evaluate evaluates a policy request.
type RequestBuilder ¶
type RequestBuilder func(req ports.PolicyRequest) (cedarcore.Request, error)
RequestBuilder converts a policy request into a Cedar request.
Source Files
Click to show internal directories.
Click to hide internal directories.