refactor: extract authz interface to test out different PaC libraries

1 files changed, 23 insertions, 0 deletions

diff --git a/pkg/authz/authz.go b/pkg/authz/authz.go
new file mode 100644
index 00000000..5a93a29c
--- /dev/null
+++ b/pkg/authz/authz.go
@@ -0,0 +1,23 @@
+package authz
+
+import "net/http"
+
+type Authorizer interface {
+	Authorize(*http.Request) bool
+}
+
+type AuthorizerFunc func(*http.Request) bool
+
+func (f AuthorizerFunc) Authorize(r *http.Request) bool {
+	return f(r)
+}
+
+func HTTP(authorizer Authorizer, h http.Handler) http.Handler {
+	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		if authorizer.Authorize(r) {
+			h.ServeHTTP(w, r)
+		} else {
+			w.WriteHeader(http.StatusForbidden)
+		}
+	})
+}