authorizationv2

type AuthorizationServiceClient interface {
	GetDecision(ctx context.Context, in *GetDecisionRequest, opts ...grpc.CallOption) (*GetDecisionResponse, error)
	GetDecisionMultiResource(ctx context.Context, in *GetDecisionMultiResourceRequest, opts ...grpc.CallOption) (*GetDecisionMultiResourceResponse, error)
	GetDecisionBulk(ctx context.Context, in *GetDecisionBulkRequest, opts ...grpc.CallOption) (*GetDecisionBulkResponse, error)
	GetEntitlements(ctx context.Context, in *GetEntitlementsRequest, opts ...grpc.CallOption) (*GetEntitlementsResponse, error)
}

type AuthorizationServiceServer interface {
	GetDecision(context.Context, *GetDecisionRequest) (*GetDecisionResponse, error)
	GetDecisionMultiResource(context.Context, *GetDecisionMultiResourceRequest) (*GetDecisionMultiResourceResponse, error)
	GetDecisionBulk(context.Context, *GetDecisionBulkRequest) (*GetDecisionBulkResponse, error)
	GetEntitlements(context.Context, *GetEntitlementsRequest) (*GetEntitlementsResponse, error)
	// contains filtered or unexported methods
}

type Decision int32

type EntityEntitlements struct {

	// ephemeral id for tracking between request and response
	EphemeralId                 string                                     `protobuf:"bytes,1,opt,name=ephemeral_id,json=ephemeralId,proto3" json:"ephemeral_id,omitempty"`
	ActionsPerAttributeValueFqn map[string]*EntityEntitlements_ActionsList `` /* 236-byte string literal not displayed */
	// contains filtered or unexported fields
}

type EntityEntitlements_ActionsList struct {
	Actions []*policy.Action `protobuf:"bytes,1,rep,name=actions,proto3" json:"actions,omitempty"`
	// contains filtered or unexported fields
}

type EntityIdentifier struct {

	// Types that are assignable to Identifier:
	//
	//	*EntityIdentifier_EntityChain
	//	*EntityIdentifier_RegisteredResourceValueFqn
	//	*EntityIdentifier_Token
	//	*EntityIdentifier_WithRequestToken
	Identifier isEntityIdentifier_Identifier `protobuf_oneof:"identifier"`
	// contains filtered or unexported fields
}

type EntityIdentifier_EntityChain struct {
	// chain of one or more entities and at most 10
	EntityChain *entity.EntityChain `protobuf:"bytes,1,opt,name=entity_chain,json=entityChain,proto3,oneof"`
}

type EntityIdentifier_RegisteredResourceValueFqn struct {
	// fully qualified name of the registered resource value stored in platform policy, where in
	// this case the resource acts as and represents a single entity for authorization/entitlement decisioning
	RegisteredResourceValueFqn string `protobuf:"bytes,2,opt,name=registered_resource_value_fqn,json=registeredResourceValueFqn,proto3,oneof"`
}

type EntityIdentifier_Token struct {
	// access token (JWT), which is used to create an entity chain (comprising one or more entities)
	Token *entity.Token `protobuf:"bytes,3,opt,name=token,proto3,oneof"`
}

type EntityIdentifier_WithRequestToken struct {
	// derive the entity from the request's authorization access token JWT, rather than passing in the body
	WithRequestToken *wrapperspb.BoolValue `protobuf:"bytes,4,opt,name=with_request_token,json=withRequestToken,proto3,oneof"`
}

type GetDecisionBulkRequest struct {
	DecisionRequests []*GetDecisionMultiResourceRequest `protobuf:"bytes,1,rep,name=decision_requests,json=decisionRequests,proto3" json:"decision_requests,omitempty"`
	// contains filtered or unexported fields
}

type GetDecisionBulkResponse struct {
	DecisionResponses []*GetDecisionMultiResourceResponse `protobuf:"bytes,1,rep,name=decision_responses,json=decisionResponses,proto3" json:"decision_responses,omitempty"`
	// contains filtered or unexported fields
}

type GetDecisionMultiResourceRequest struct {

	// an entity must be identified for authorization decisioning
	EntityIdentifier *EntityIdentifier `protobuf:"bytes,1,opt,name=entity_identifier,json=entityIdentifier,proto3" json:"entity_identifier,omitempty"`
	// name on action is required
	Action    *policy.Action `protobuf:"bytes,2,opt,name=action,proto3" json:"action,omitempty"`
	Resources []*Resource    `protobuf:"bytes,3,rep,name=resources,proto3" json:"resources,omitempty"`
	// obligations (fully qualified values) the requester is capable of fulfilling
	// i.e. https://<namespace>/obl/<definition name>/value/<value>
	FulfillableObligationFqns []string `` /* 138-byte string literal not displayed */
	// contains filtered or unexported fields
}

type GetDecisionMultiResourceResponse struct {

	// convenience flag indicating global resource decisions result (permit/deny)
	AllPermitted *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=all_permitted,json=allPermitted,proto3" json:"all_permitted,omitempty"`
	// individual resource decisions
	ResourceDecisions []*ResourceDecision `protobuf:"bytes,2,rep,name=resource_decisions,json=resourceDecisions,proto3" json:"resource_decisions,omitempty"`
	// contains filtered or unexported fields
}

type GetDecisionRequest struct {

	// an entity must be identified for authorization decisioning
	EntityIdentifier *EntityIdentifier `protobuf:"bytes,1,opt,name=entity_identifier,json=entityIdentifier,proto3" json:"entity_identifier,omitempty"`
	// name on action is required
	Action   *policy.Action `protobuf:"bytes,2,opt,name=action,proto3" json:"action,omitempty"`
	Resource *Resource      `protobuf:"bytes,3,opt,name=resource,proto3" json:"resource,omitempty"`
	// obligations (fully qualified values) the requester is capable of fulfilling
	// i.e. https://<namespace>/obl/<definition name>/value/<value>
	FulfillableObligationFqns []string `` /* 138-byte string literal not displayed */
	// contains filtered or unexported fields
}

type GetDecisionResponse struct {

	// decision on the resource
	Decision *ResourceDecision `protobuf:"bytes,1,opt,name=decision,proto3" json:"decision,omitempty"`
	// contains filtered or unexported fields
}

type GetEntitlementsRequest struct {

	// an entity must be identified for entitlement decisioning
	EntityIdentifier *EntityIdentifier `protobuf:"bytes,1,opt,name=entity_identifier,json=entityIdentifier,proto3" json:"entity_identifier,omitempty"`
	// optional parameter to return all entitled values for attribute definitions with hierarchy rules, propagating
	// down the hierarchical values instead of returning solely the value that is directly entitled
	WithComprehensiveHierarchy *bool `` /* 148-byte string literal not displayed */
	// contains filtered or unexported fields
}

type GetEntitlementsResponse struct {
	Entitlements []*EntityEntitlements `protobuf:"bytes,1,rep,name=entitlements,proto3" json:"entitlements,omitempty"`
	// contains filtered or unexported fields
}

type Resource struct {

	// ephemeral id for tracking between request and response
	EphemeralId string `protobuf:"bytes,1,opt,name=ephemeral_id,json=ephemeralId,proto3" json:"ephemeral_id,omitempty"`
	// Types that are assignable to Resource:
	//
	//	*Resource_AttributeValues_
	//	*Resource_RegisteredResourceValueFqn
	Resource isResource_Resource `protobuf_oneof:"resource"`
	// contains filtered or unexported fields
}

type ResourceDecision struct {

	// ephemeral id for tracking between request and response
	EphemeralResourceId string `protobuf:"bytes,1,opt,name=ephemeral_resource_id,json=ephemeralResourceId,proto3" json:"ephemeral_resource_id,omitempty"`
	// decision result
	Decision Decision `protobuf:"varint,2,opt,name=decision,proto3,enum=authorization.v2.Decision" json:"decision,omitempty"`
	// obligations (fully qualified values) the PEP is required to fulfill on the given resource
	// i.e. https://<namespace>/obl/<definition name>/value/<value>
	RequiredObligations []string `protobuf:"bytes,3,rep,name=required_obligations,json=requiredObligations,proto3" json:"required_obligations,omitempty"`
	// contains filtered or unexported fields
}

type Resource_AttributeValues struct {
	Fqns []string `protobuf:"bytes,1,rep,name=fqns,proto3" json:"fqns,omitempty"`
	// contains filtered or unexported fields
}

type Resource_AttributeValues_ struct {
	// a set of attribute value FQNs, such as those on a TDF, between 1 and 20 in count
	AttributeValues *Resource_AttributeValues `protobuf:"bytes,2,opt,name=attribute_values,json=attributeValues,proto3,oneof"`
}

type Resource_RegisteredResourceValueFqn struct {
	// fully qualified name of the registered resource value stored in platform policy
	RegisteredResourceValueFqn string `protobuf:"bytes,3,opt,name=registered_resource_value_fqn,json=registeredResourceValueFqn,proto3,oneof"`
}

type UnimplementedAuthorizationServiceServer struct {
}

type UnsafeAuthorizationServiceServer interface {
	// contains filtered or unexported methods
}