authzed

type CertVerification ¶

type CertVerification bool

CertVerification is an enumeration of how secure TLS should be configured.

const (
	// VerifyCA will verify the certificate authority has been verified.
	VerifyCA CertVerification = false

	// SkipVerifyCA will not verify the certificate authority when using TLS.
	SkipVerifyCA CertVerification = true
)

type Checkable ¶

type Checkable interface {
	AsObjectAndRelation(relation string) *v0.ObjectAndRelation
}

Checkable represents any object that can be represented as an ObjectAndRelation.

type CheckableAtRevision ¶

type CheckableAtRevision interface {
	Checkable
	Revision() *v0.Zookie
}

CheckableAtRevision represents any object that can be represented at a specific revision.

type Client ¶

type Client struct {
	v0.ACLServiceClient
	v0.NamespaceServiceClient
}

Client represents an open connection to Authzed.

Clients are backed by a gRPC client and as such are thread-safe.

func NewClient(endpoint string, opts ...grpc.DialOption) (*Client, error)

client, err := authzed.NewClient(
	"grpc.authzed.com:443",
	authzed.Token("my_token_deadbeefdeadbeefdeadbeef"),
	authzed.SystemCerts(authzed.VerifyCA),
)
if err != nil {
	log.Fatal(err)
}

_, err = client.Check(context.Background(), &v0.CheckRequest{
	TestUserset: &v0.ObjectAndRelation{
		Namespace: "mytenant/document",
		ObjectId:  "readme",
		Relation:  "viewer",
	},
	User: &v0.User{UserOneof: &v0.User_Userset{
		Userset: &v0.ObjectAndRelation{
			Namespace: "mytenant/user",
			ObjectId:  "jimmy",
			Relation:  "...",
		},
	}},
})
if err != nil {
	log.Fatal(err)
}

func (c *Client) NewFilterIter(slice interface{}, user *v0.User, relation string, optionalRevision *v0.Zookie) FilterIter

type FilterIter ¶

type FilterIter interface {
	Next(context.Context) bool
	Err() error
	Item() interface{}
}

FilterIter represents an iterator over a list of values that have been filtered based on access.