authorizer

type ABACKey string

type AcctEntitlementsType map[string]map[string][]string

type Authorizer interface {
	// Evaluate evaluates the authorization policy for the given request.
	// It takes the context, full method name, request object, and an OpaEvaluator as input.
	// It returns a boolean indicating whether the request is authorized, a modified context,
	// and an error if any.
	Evaluate(ctx context.Context, fullMethod string, req interface{}, opaEvaluator OpaEvaluator) (bool, context.Context, error)

	// OpaQuery executes a query against the OPA (Open Policy Agent) with the specified decision document.
	// If the decision document is an empty string, the query is executed against the default decision document
	// configured in OPA.
	// It takes the context, decision document name, OPA request object, and OPA response object as input.
	// It returns an error if any.
	OpaQuery(ctx context.Context, decisionDocument string, opaReq, opaResp interface{}) error

	AffirmAuthorization(ctx context.Context, fullMethod string, eq interface{}) (context.Context, error)

	GetAcctEntitlements(ctx context.Context, accountIDs, serviceNames []string) (*AcctEntitlementsType, error)

	GetCurrentUserCompartments(ctx context.Context) ([]string, error)
}

type ClaimsVerifier func([]string, []string) (string, []error)

type DecisionInput struct {
	Type             string        `json:"type"` // Object/resource-type to match
	Verb             string        `json:"verb"` // Verb to match
	SealCtx          []interface{} `json:"ctx"`  // Array of app/service-specific context data to match
	DecisionDocument string        `json:"-"`    // OPA decision document to query, by default "",

}

type DecisionInputHandler interface {
	// GetDecisionInput returns an app/service-specific DecisionInput.
	// A nil DecisionInput should NOT be returned unless error.
	GetDecisionInput(ctx context.Context, fullMethod string, req interface{}) (*DecisionInput, error)
}

type DefaultDecisionInputer struct{}

type MockAuthorizer struct {
	// contains filtered or unexported fields
}

type MockAuthorizerMockRecorder struct {
	// contains filtered or unexported fields
}

type ObligationKey string

type OpaEvaluator func(ctx context.Context, decisionDocument string, opaReq, opaResp interface{}) error