Documentation
¶
Overview ¶
Package authorizationapi validates the DTQL authorization HTTP ingress. These descriptions carry no authenticated identity or execution authority.
Index ¶
Constants ¶
View Source
const MaxRequestBytes = 1 << 20
Variables ¶
This section is empty.
Functions ¶
func DecodeStrict ¶
Types ¶
type Change ¶
type Change struct {
Op string `json:"op"`
Path []string `json:"path"`
Value json.RawMessage `json:"value"`
}
type Operation ¶
type Operation struct {
ID string `json:"id"`
Action string `json:"action"`
Resource authorization.Resource `json:"resource"`
Query *Query `json:"query,omitempty"`
Mutation *Mutation `json:"mutation,omitempty"`
ExecutionClass authorization.ExecutionClass `json:"executionClass"`
Callable *authorization.Callable `json:"callable,omitempty"`
}
type Query ¶
type Request ¶
type Request struct {
APIVersion string `json:"apiVersion"`
Mode authorization.Mode `json:"mode"`
DiagnosticLevel string `json:"diagnosticLevel"`
Subject *access.PrincipalRef `json:"subject,omitempty"`
Simulation *Simulation `json:"simulation,omitempty"`
Operations []Operation `json:"operations"`
Sample *Sample `json:"sample,omitempty"`
}
Click to show internal directories.
Click to hide internal directories.