refactor: move hard coded checks with cedar policy

1 files changed, 12 insertions, 0 deletions

diff --git a/etc/authzd/policy0.cedar b/etc/authzd/policy0.cedar
index 034e81b5..56457622 100644
--- a/etc/authzd/policy0.cedar
+++ b/etc/authzd/policy0.cedar
@@ -18,3 +18,15 @@ when {
     context.path like "*.html"
   )
 };
+
+permit(principal, action, resource)
+when {
+  context has host && context has method && context has path && (
+    context.host == "sparkle.staging.runway.gitlab.net" &&
+      context.method == "GET" && (
+        context.path == "/" ||
+        context.path == "/app.js" ||
+        context.path == "/callback"
+      )
+  )
+};