The highest tagged major version is
Documentation
¶
Overview ¶
Package serve is the access decision behind an org-scoped call: who may do what, where, answered allow or deny.
That opening sentence is what hanzoai/cloud publishes as the description of /v1/authz — it reads this comment rather than keeping a second copy of it — so the sentence is addressed to a reader of the API reference, and the rest of this file to whoever edits it.
It is the network surface over the decision, and nothing else.
It is a SEPARATE package because the decision leaf must stay pure: a caller importing github.com/hanzoai/authz links no HTTP stack, no driver, no socket, so adding a caller costs nothing. Speaking HTTP is I/O, and I/O lives here.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func Use ¶ added in v1.10.37
Mount registers /v1/authz/* on the shared cloud app (HIP-0106).
It takes only the canonical logger — the surface has no other dependency on the host, so this stays a standalone module and cloud's composition root adapts its own dependencies by passing the one thing needed.
The surface is STATELESS, like the decision it exposes: a check carries the grants it is to be decided against. There is no policy store and no policy CRUD here, because the grant SET belongs to IAM — IAM signs it, so IAM owns it, and a second writable copy behind this surface would be a second source of truth for who may do what.
Types ¶
This section is empty.
Source Files