authzv1alpha1

type Annotation struct {

	// the ID of the policy with the annotation
	PolicyId string `protobuf:"bytes,1,opt,name=policy_id,json=policyId,proto3" json:"policy_id,omitempty"`
	// the key of the annotation. e.g. in @advice("something")
	// it is 'advice'.
	Key string `protobuf:"bytes,2,opt,name=key,proto3" json:"key,omitempty"`
	// the value of the annotation. e.g. in @advice("something")
	// it is 'something'
	Value string `protobuf:"bytes,3,opt,name=value,proto3" json:"value,omitempty"`
	// contains filtered or unexported fields
}

type BatchAuthorizeRequest struct {
	Requests []*Request `protobuf:"bytes,3,rep,name=requests,proto3" json:"requests,omitempty"`
	// contains filtered or unexported fields
}

type BatchAuthorizeResponse struct {
	Evaluations []*Evaluation `protobuf:"bytes,1,rep,name=evaluations,proto3" json:"evaluations,omitempty"`
	// contains filtered or unexported fields
}

type CreatePolicySetRequest struct {
	PolicySet *PolicySetInput `protobuf:"bytes,1,opt,name=policy_set,json=policySet,proto3" json:"policy_set,omitempty"`
	// contains filtered or unexported fields
}

type CreatePolicySetResponse struct {
	PolicySet *PolicySet `protobuf:"bytes,1,opt,name=policy_set,json=policySet,proto3" json:"policy_set,omitempty"`
	// contains filtered or unexported fields
}

type DebugEvaluation struct {

	// version is used when serializing the DebugEvaluation message in order to ensure
	// forwards-compatibility. Version should be set to '1' when storing DebugEvaluation messages in archival storage.
	Version          uint32            `protobuf:"varint,1,opt,name=version,proto3" json:"version,omitempty"`
	Evaluation       *Evaluation       `protobuf:"bytes,2,opt,name=evaluation,proto3" json:"evaluation,omitempty"`
	DebugInformation *DebugInformation `protobuf:"bytes,3,opt,name=debug_information,json=debugInformation,proto3" json:"debug_information,omitempty"`
	// contains filtered or unexported fields
}

type DebugInformation struct {

	// PolicySets which contributed to the authorization decision.
	PolicySets []*PolicySet `protobuf:"bytes,1,rep,name=policy_sets,json=policySets,proto3" json:"policy_sets,omitempty"`
	// Entities which contributed to the authorization decision.
	Entities []*v1alpha1.Entity `protobuf:"bytes,2,rep,name=entities,proto3" json:"entities,omitempty"`
	// contains filtered or unexported fields
}

type Decision int32

type DeletePolicySetRequest struct {
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// contains filtered or unexported fields
}

type DeletePolicySetResponse struct {
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// contains filtered or unexported fields
}

type Diagnostics struct {
	Reason      []string      `protobuf:"bytes,1,rep,name=reason,proto3" json:"reason,omitempty"`
	Errors      []string      `protobuf:"bytes,2,rep,name=errors,proto3" json:"errors,omitempty"`
	Annotations []*Annotation `protobuf:"bytes,3,rep,name=annotations,proto3" json:"annotations,omitempty"`
	// contains filtered or unexported fields
}

type Evaluation struct {
	Id          string       `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	Request     *Request     `protobuf:"bytes,2,opt,name=request,proto3" json:"request,omitempty"`
	Decision    Decision     `protobuf:"varint,3,opt,name=decision,proto3,enum=commonfate.authz.v1alpha1.Decision" json:"decision,omitempty"`
	Diagnostics *Diagnostics `protobuf:"bytes,4,opt,name=diagnostics,proto3" json:"diagnostics,omitempty"`
	// The client-side identifier for the request specified in AuthorizationRequest.
	ClientKey   string                 `protobuf:"bytes,5,opt,name=client_key,json=clientKey,proto3" json:"client_key,omitempty"`
	EvaluatedAt *timestamppb.Timestamp `protobuf:"bytes,6,opt,name=evaluated_at,json=evaluatedAt,proto3" json:"evaluated_at,omitempty"`
	// the duration that it took to make the authorization decision
	EvaluationDuration *durationpb.Duration `protobuf:"bytes,7,opt,name=evaluation_duration,json=evaluationDuration,proto3" json:"evaluation_duration,omitempty"`
	// A boolean value indicating whether access is allowed or denied.
	// This is emitted in addition to the 'decision' field to simplify interpreting
	// audit log events, as 'decision' is serialized as an integer.
	Allowed bool `protobuf:"varint,8,opt,name=allowed,proto3" json:"allowed,omitempty"`
	// contains filtered or unexported fields
}

type GetPolicySetRequest struct {

	// The token for the next page.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// contains filtered or unexported fields
}

type GetPolicySetResponse struct {
	PolicySet *PolicySet `protobuf:"bytes,1,opt,name=policy_set,json=policySet,proto3" json:"policy_set,omitempty"`
	// contains filtered or unexported fields
}

type GetSchemaJSONStringRequest struct {
	// contains filtered or unexported fields
}

type GetSchemaJSONStringResponse struct {
	Schema string `protobuf:"bytes,1,opt,name=schema,proto3" json:"schema,omitempty"`
	// contains filtered or unexported fields
}

type HealthCheckRequest struct {
	// contains filtered or unexported fields
}

type HealthCheckResponse struct {
	// contains filtered or unexported fields
}

type ListPolicySetsRequest struct {

	// The token for the next page.
	PageToken string `protobuf:"bytes,4,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// contains filtered or unexported fields
}

type ListPolicySetsResponse struct {
	PolicySets    []*PolicySet `protobuf:"bytes,1,rep,name=policy_sets,json=policySets,proto3" json:"policy_sets,omitempty"`
	NextPageToken string       `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

type Policy struct {

	// ID of the policy.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// Cedar code for the policy set.
	Text string `protobuf:"bytes,2,opt,name=text,proto3" json:"text,omitempty"`
	// contains filtered or unexported fields
}

type PolicySet struct {

	// ID of the policy set.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// The policies contained in the policy set.
	Policies []*Policy `protobuf:"bytes,2,rep,name=policies,proto3" json:"policies,omitempty"`
	// The source code for the policy set.
	Text string `protobuf:"bytes,3,opt,name=text,proto3" json:"text,omitempty"`
	// contains filtered or unexported fields
}

type PolicySetInput struct {

	// ID of the policy.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// Cedar code for the policy set.
	Text string `protobuf:"bytes,2,opt,name=text,proto3" json:"text,omitempty"`
	// contains filtered or unexported fields
}

type Request struct {
	Principal *v1alpha1.EID `protobuf:"bytes,1,opt,name=principal,proto3" json:"principal,omitempty"`
	Action    *v1alpha1.EID `protobuf:"bytes,2,opt,name=action,proto3" json:"action,omitempty"`
	Resource  *v1alpha1.EID `protobuf:"bytes,3,opt,name=resource,proto3" json:"resource,omitempty"`
	// A client side identifier for the authorization request.
	// The client_key will be included in the corresponding evaluation for the
	// particular request made.
	//
	// Useful when calling BatchAuthorize to match the evaluations with the requests.
	ClientKey string `protobuf:"bytes,4,opt,name=client_key,json=clientKey,proto3" json:"client_key,omitempty"`
	// Entities to 'overlay' temporarily on the entities stored in the authz service.
	OverlayEntities []*v1alpha1.Entity `protobuf:"bytes,5,rep,name=overlay_entities,json=overlayEntities,proto3" json:"overlay_entities,omitempty"`
	// Parent/child relationships to 'overlay' temporarily on the entities stored in the authz service.
	OverlayChildren []*v1alpha1.ChildRelation `protobuf:"bytes,6,rep,name=overlay_children,json=overlayChildren,proto3" json:"overlay_children,omitempty"`
	// Tags associated with the authorization evaluation.
	// Common Fate uses this to add attributes like the Access Request ID
	// to the evaluation.
	//
	// Tags are *not* used to make authorization decisions but rather is used to aid in observability
	// and debugging of authorization decisions.
	Tags []*Tag `protobuf:"bytes,8,rep,name=tags,proto3" json:"tags,omitempty"`
	// contains filtered or unexported fields
}

type SourceRange struct {
	Start uint32 `protobuf:"varint,1,opt,name=start,proto3" json:"start,omitempty"`
	End   uint32 `protobuf:"varint,2,opt,name=end,proto3" json:"end,omitempty"`
	// contains filtered or unexported fields
}

type Tag struct {
	Key   string `protobuf:"bytes,1,opt,name=key,proto3" json:"key,omitempty"`
	Value string `protobuf:"bytes,2,opt,name=value,proto3" json:"value,omitempty"`
	// contains filtered or unexported fields
}

type UpdatePolicySetRequest struct {
	PolicySet *PolicySetInput `protobuf:"bytes,1,opt,name=policy_set,json=policySet,proto3" json:"policy_set,omitempty"`
	// contains filtered or unexported fields
}

type UpdatePolicySetResponse struct {
	PolicySet *PolicySet `protobuf:"bytes,1,opt,name=policy_set,json=policySet,proto3" json:"policy_set,omitempty"`
	// contains filtered or unexported fields
}

type ValidatePolicySetTextRequest struct {
	PolicySetText string `protobuf:"bytes,1,opt,name=policy_set_text,json=policySetText,proto3" json:"policy_set_text,omitempty"`
	// contains filtered or unexported fields
}

type ValidatePolicySetTextResponse struct {
	Result *ValidationResult `protobuf:"bytes,1,opt,name=result,proto3" json:"result,omitempty"`
	// contains filtered or unexported fields
}

type ValidationError struct {
	PolicyId string `protobuf:"bytes,1,opt,name=policy_id,json=policyId,proto3" json:"policy_id,omitempty"`
	Message  string `protobuf:"bytes,2,opt,name=message,proto3" json:"message,omitempty"`
	// contains filtered or unexported fields
}

type ValidationErrorKind int32

type ValidationResult struct {
	Errors   []*ValidationError   `protobuf:"bytes,1,rep,name=errors,proto3" json:"errors,omitempty"`
	Warnings []*ValidationWarning `protobuf:"bytes,2,rep,name=warnings,proto3" json:"warnings,omitempty"`
	// contains filtered or unexported fields
}

type ValidationWarning struct {
	PolicyId string `protobuf:"bytes,1,opt,name=policy_id,json=policyId,proto3" json:"policy_id,omitempty"`
	Message  string `protobuf:"bytes,2,opt,name=message,proto3" json:"message,omitempty"`
	// contains filtered or unexported fields
}

type ValidationWarningKind int32