middleware

type Identity interface {
	// JWT indicates that ID should be interpreted as a JWT token.
	JWT() Identity

	// Subject indicates that ID should be interpreted as a subject name (e.g. username, account ID, email, etc.).
	Subject() Identity

	// Manual indicates that the identity value is set manually and isn't resolved to a user by the authorizer.
	Manual() Identity

	// None indicates that this Identity represents an unauthenticated caller.
	None() Identity

	// ID sets the identity value - a string that represents a user ID or a JWT token.
	ID(identity string) Identity
}

type Policy struct {
	// Name is the Name of the policy being queried for authorization.
	Name string

	// Path is the package name of the rego policy to evaluate.
	// If left empty, a policy mapper must be attached to the middleware to provide
	// the policy path from incoming messages.
	Path string

	// Decision is the authorization rule to use.
	Decision string

	// Root is an optional prefix shared by all policy modules being evaluated.
	Root string

	// Label name of the aserto policy's instance being queried for authorization.
	InstanceLabel string
}