diff options
| author | mo khan <mo@mokhan.ca> | 2025-07-15 16:37:08 -0600 |
|---|---|---|
| committer | mo khan <mo@mokhan.ca> | 2025-07-17 16:30:22 -0600 |
| commit | 45df4d0d9b577fecee798d672695fe24ff57fb1b (patch) | |
| tree | 1b99bf645035b58e0d6db08c7a83521f41f7a75b /Cargo.toml | |
| parent | f94f79608393d4ab127db63cc41668445ef6b243 (diff) | |
feat: migrate from Cedar to SpiceDB authorization system
This is a major architectural change that replaces the Cedar policy-based
authorization system with SpiceDB's relation-based authorization.
Key changes:
- Migrate from Rust to Go implementation
- Replace Cedar policies with SpiceDB schema and relationships
- Switch from envoy `ext_authz` with Cedar to SpiceDB permission checks
- Update build system and dependencies for Go ecosystem
- Maintain Envoy integration for external authorization
This change enables more flexible permission modeling through SpiceDB's
Google Zanzibar inspired relation-based system, supporting complex
hierarchical permissions that were difficult to express in Cedar.
Breaking change: Existing Cedar policies and Rust-based configuration
will no longer work and need to be migrated to SpiceDB schema.
Diffstat (limited to 'Cargo.toml')
| -rw-r--r-- | Cargo.toml | 32 |
1 files changed, 0 insertions, 32 deletions
diff --git a/Cargo.toml b/Cargo.toml deleted file mode 100644 index 0a3f3483..00000000 --- a/Cargo.toml +++ /dev/null @@ -1,32 +0,0 @@ -[package] -name = "authzd" -version = "0.1.0" -edition = "2024" - -[[bin]] -name = "authzd" -path = "src/bin/cli.rs" - -[lib] -name = "authzd" -path = "src/lib.rs" - -[dependencies] -cedar-policy = "4.4.1" -clap = { version = "4.5", features = ["derive", "env"] } -envoy-types = "0.6.0" -log = "0.4.27" -please = { git = "https://github.com/xlgmokha/please.git", version = "0.1.0" } -reqwest = { version = "0.12", features = ["json"] } -serde = { version = "1.0", features = ["derive"] } -serde_json = "1.0" -tokio = { version = "1.0.0", features = ["macros", "rt-multi-thread"] } -tonic = "0.13.1" -tracing = "0.1" -tracing-subscriber = { version = "0.3", features = ["json"] } -urlencoding = "2.1" - -[dev-dependencies] -tokio-stream = "0.1" -tokio-test = "0.4.0" -tonic-build = "0.10.0" |
