authz

type Authz struct {
	// contains filtered or unexported fields
}

type Config struct {
	Action     string                         `yaml:"action" mapstructure:"action"`
	Attributes map[string]proxyattr.Attribute `yaml:"attributes" mapstructure:"attributes"`
	Relations  []Relation                     `yaml:"relations" mapstructure:"relations"`
	// RelationOnly, when true, makes the hook attach relations to an already
	// existing resource (looked up by URN) instead of upserting the resource.
	// Upserting deletes all existing subject relations on the resource before
	// re-adding them; relation_only avoids that so relations are added additively.
	RelationOnly bool `yaml:"relation_only" mapstructure:"relation_only"`
}

type ProjectService interface {
	Get(ctx context.Context, id string) (project.Project, error)
}

type Relation struct {
	Role               string `yaml:"role" mapstructure:"role"`
	SubjectPrincipal   string `yaml:"subject_principal" mapstructure:"subject_principal"`
	SubjectIDAttribute string `yaml:"subject_id" mapstructure:"subject_id_attribute"`
}

type RelationService interface {
	Create(ctx context.Context, relation relation.RelationV2) (relation.RelationV2, error)
}

type RelationTransformer interface {
	TransformRelation(ctx context.Context, rlt relation.RelationV2) (relation.RelationV2, error)
}

type ResourceService interface {
	Upsert(ctx context.Context, resource resource.Resource) (resource.Resource, error)
	GetByURN(ctx context.Context, urn string) (resource.Resource, error)
}