Directories
¶
| Path | Synopsis |
|---|---|
|
Package asyncutil tracks detached, fire-and-forget goroutines (email/SMS sends, webhook events, audit logs) that request handlers start and don't wait on.
|
Package asyncutil tracks detached, fire-and-forget goroutines (email/SMS sends, webhook events, audit logs) that request handlers start and don't wait on. |
|
Package authctx carries authentication principal details on context.Context.
|
Package authctx carries authentication principal details on context.Context. |
|
authorization
|
|
|
engine
Package engine defines the AuthorizationEngine SPI — the abstraction over a relationship-based access control (ReBAC) backend used by Authorizer's fine-grained authorization (FGA) subsystem.
|
Package engine defines the AuthorizationEngine SPI — the abstraction over a relationship-based access control (ReBAC) backend used by Authorizer's fine-grained authorization (FGA) subsystem. |
|
engine/openfga
Package openfga implements the engine.AuthorizationEngine SPI by embedding the OpenFGA server in-process (openfga v1.17.1).
|
Package openfga implements the engine.AuthorizationEngine SPI by embedding the OpenFGA server in-process (openfga v1.17.1). |
|
Package clientmetadata resolves OAuth Client ID Metadata Documents (CIMD): client identifiers that are HTTPS URLs pointing at a JSON document describing the client, rather than opaque strings registered ahead of time.
|
Package clientmetadata resolves OAuth Client ID Metadata Documents (CIMD): client identifiers that are HTTPS URLs pointing at a JSON document describing the client, rather than opaque strings registered ahead of time. |
|
Package codestate owns the encoding of the two positional, "@@"-delimited blobs the authorization-code flow persists in the memory store.
|
Package codestate owns the encoding of the two positional, "@@"-delimited blobs the authorization-code flow persists in the memory store. |
|
Package constants holds the shared, compile-time constant values used across Authorizer — database types, authentication and authenticator methods, token and cookie names, webhook event names, audit event/actor/resource types, and related enumerations.
|
Package constants holds the shared, compile-time constant values used across Authorizer — database types, authentication and authenticator methods, token and cookie names, webhook event names, audit event/actor/resource types, and related enumerations. |
|
Package delegatedscope decides what an RFC 8693 DELEGATED token — an agent acting on behalf of a user — is permitted to do at Authorizer's own API.
|
Package delegatedscope decides what an RFC 8693 DELEGATED token — an agent acting on behalf of a user — is permitted to do at Authorizer's own API. |
|
Package gateway translates REST (`/v1/*`) calls into in-process gRPC method invocations using grpc-gateway.
|
Package gateway translates REST (`/v1/*`) calls into in-process gRPC method invocations using grpc-gateway. |
|
internal/graphql/lock_mfa.go
|
internal/graphql/lock_mfa.go |
|
Package grpcsrv builds and runs the Authorizer gRPC server.
|
Package grpcsrv builds and runs the Authorizer gRPC server. |
|
client
Package client provides helpers for attaching Authorizer authentication metadata to outgoing gRPC client contexts.
|
Package client provides helpers for attaching Authorizer authentication metadata to outgoing gRPC client contexts. |
|
handlers
Package handlers — admin.go hosts AdminHandler, the single gRPC service handler for Authorizer's admin (super-admin-only) API.
|
Package handlers — admin.go hosts AdminHandler, the single gRPC service handler for Authorizer's admin (super-admin-only) API. |
|
interceptors
Package interceptors contains the gRPC server interceptors shared across Authorizer services.
|
Package interceptors contains the gRPC server interceptors shared across Authorizer services. |
|
transport
Package transport bridges between gRPC's incoming metadata / outgoing trailers and the service layer's transport-agnostic RequestMetadata / ResponseSideEffects.
|
Package transport bridges between gRPC's incoming metadata / outgoing trailers and the service layer's transport-agnostic RequestMetadata / ResponseSideEffects. |
|
scim
Package scim exposes the per-organization inbound SCIM 2.0 HTTP surface (RFC 7644) at /scim/v2/.
|
Package scim exposes the per-organization inbound SCIM 2.0 HTTP surface (RFC 7644) at /scim/v2/. |
|
Package mcp exposes a subset of Authorizer's gRPC methods as MCP tools.
|
Package mcp exposes a subset of Authorizer's gRPC methods as MCP tools. |
|
Package metrics defines Prometheus collectors and helpers for Authorizer observability (HTTP traffic, auth events, GraphQL, security signals, and database health).
|
Package metrics defines Prometheus collectors and helpers for Authorizer observability (HTTP traffic, auth events, GraphQL, security signals, and database health). |
|
Package refs provides small helpers for converting between values and their pointers (and back), used to model optional fields across the GraphQL, storage, and proto layers.
|
Package refs provides small helpers for converting between values and their pointers (and back), used to model optional fields across the GraphQL, storage, and proto layers. |
|
internal/service/lock_mfa.go
|
internal/service/lock_mfa.go |
|
clientauth
Package clientauth resolves and authenticates the OAuth client presented at the token endpoint (RFC 6749 §2.3).
|
Package clientauth resolves and authenticates the OAuth client presented at the token endpoint (RFC 6749 §2.3). |
|
scim
Package scim implements a per-organization inbound SCIM 2.0 server for user provisioning and deprovisioning (RFC 7643/7644, users only).
|
Package scim implements a per-organization inbound SCIM 2.0 server for user provisioning and deprovisioning (RFC 7643/7644, users only). |
|
db/cassandradb
Package cassandradb implements the storage provider backed by Cassandra/ScyllaDB.
|
Package cassandradb implements the storage provider backed by Cassandra/ScyllaDB. |
|
db/sql/sqlitedialect
Package sqlitedialect is a pure-Go GORM SQLite dialector.
|
Package sqlitedialect is a pure-Go GORM SQLite dialector. |
Click to show internal directories.
Click to hide internal directories.