Versions in this module Expand all Collapse all v2 v2.0.2 Jul 2, 2026 v2.0.1 Jun 29, 2026 Changes in this version + const ConstantSystemInternalRole + const NamespaceProfile + func EnrichTenancyClaims(ctx context.Context, tenantID, partitionID, accessID string) context.Context + func IsTenancyChecksOnClaimSkipped(ctx context.Context) bool + func JwtFromContext(ctx context.Context) string + func JwtToContext(ctx context.Context, jwt string) context.Context + func SkipTenancyChecksOnClaims(ctx context.Context) context.Context + type AuditLogger interface + LogDecision func(ctx context.Context, req CheckRequest, result CheckResult, ...) error + type AuthOption func(ctx context.Context, opts *AuthOptions) + func WithDisableSecurity() AuthOption + func WithDisableSecurityConfig(cfg config.ConfigurationSecurity) AuthOption + type AuthOptions struct + DisableSecurity bool + DisableSecurityCfg config.ConfigurationSecurity + type AuthenticationClaims struct + AccessID string + ContactID string + DeviceID string + Ext map[string]any + PartitionID string + Roles []string + ServiceName string + SessionID string + TenantID string + func ClaimsFromContext(ctx context.Context) *AuthenticationClaims + func ClaimsFromMap(m map[string]string) *AuthenticationClaims + func (a *AuthenticationClaims) AsMetadata() map[string]string + func (a *AuthenticationClaims) ClaimsToContext(ctx context.Context) context.Context + func (a *AuthenticationClaims) GetAccessID() string + func (a *AuthenticationClaims) GetContactID() string + func (a *AuthenticationClaims) GetDeviceID() string + func (a *AuthenticationClaims) GetPartitionID() string + func (a *AuthenticationClaims) GetPartitionIDs() []string + func (a *AuthenticationClaims) GetProfileID() string + func (a *AuthenticationClaims) GetRoles() []string + func (a *AuthenticationClaims) GetServiceName() string + func (a *AuthenticationClaims) GetSessionID() string + func (a *AuthenticationClaims) GetTenantID() string + func (a *AuthenticationClaims) IsInternalSystem() bool + type Authenticator interface + Authenticate func(ctx context.Context, jwtToken string, options ...AuthOption) (context.Context, error) + type Authorizer interface + BatchCheck func(ctx context.Context, requests []CheckRequest) ([]CheckResult, error) + Check func(ctx context.Context, req CheckRequest) (CheckResult, error) + DeleteTuple func(ctx context.Context, tuple RelationTuple) error + DeleteTuples func(ctx context.Context, tuples []RelationTuple) error + Expand func(ctx context.Context, object ObjectRef, relation string) ([]SubjectRef, error) + ListRelations func(ctx context.Context, object ObjectRef) ([]RelationTuple, error) + ListSubjectRelations func(ctx context.Context, subject SubjectRef, namespace string) ([]RelationTuple, error) + WriteTuple func(ctx context.Context, tuple RelationTuple) error + WriteTuples func(ctx context.Context, tuples []RelationTuple) error + type AuthzOption func(ctx context.Context, opts *AuthzOptions) + func WithAuditLogger(auditLogger AuditLogger) AuthzOption + func WithAuthorizationConfig(cfg config.ConfigurationAuthorization) AuthzOption + type AuthzOptions struct + Auditor AuditLogger + Cfg config.ConfigurationAuthorization + type CheckRequest struct + Object ObjectRef + Permission string + Subject SubjectRef + type CheckResult struct + Allowed bool + CheckedAt int64 + Reason string + type Manager interface + Close func() + GetAuthenticator func(ctx context.Context) Authenticator + GetAuthorizer func(ctx context.Context) Authorizer + GetWorkloadAPI func(ctx context.Context) WorkloadAPI + type ObjectRef struct + ID string + Namespace string + type Option func(ctx context.Context, opts *Options) + func WithInvoker(cfg client.Manager) Option + func WithOauth2Config(cfg config.ConfigurationOAUTH2) Option + func WithSecurityConfig(cfg config.ConfigurationSecurity) Option + func WithServiceConfig(cfg config.ConfigurationService) Option + type Options struct + Invoker client.Manager + Oath2Cfg config.ConfigurationOAUTH2 + SecurityCfg config.ConfigurationSecurity + ServiceCfg config.ConfigurationService + type RelationTuple struct + Object ObjectRef + Relation string + Subject SubjectRef + type SubjectRef struct + ID string + Namespace string + Relation string + type WorkloadAPI interface + Close func() + Setup func(ctx context.Context) (*tls.Config, error) Other modules containing this package github.com/pitabwire/frame