Versions in this module Expand all Collapse all v0 v0.1.0 Oct 2, 2026 Changes in this version + var ErrDenied = errors.New("authz: denied") + var ErrInvalidConfiguration = errors.New("authz: invalid configuration") + var ErrInvalidRequest = errors.New("authz: invalid request") + var ErrUnauthenticated = errors.New("authz: unauthenticated") + var ErrUnavailable = errors.New("authz: unavailable") + type CheckFunc func(ctx context.Context, request Request) (bool, error) + type Request struct + Action string + Caller identity.Caller + Resource string + type Rule struct + func All(rules ...Rule) (Rule, error) + func Any(rules ...Rule) (Rule, error) + func Check(check CheckFunc) (Rule, error) + func CognitoGroups(issuer string, required ...string) (Rule, error) + func IAMPrincipal(principalARN string) (Rule, error) + func IAMRoleSessions(partition, accountID, roleName string) (Rule, error) + func JWTClient(issuer, clientID string) (Rule, error) + func JWTScopes(issuer string, required ...string) (Rule, error) + func JWTSubject(issuer, subject string) (Rule, error) + func Sources(allowed ...identity.Source) (Rule, error) + func (r Rule) Authorize(ctx context.Context, request Request) error