summaryrefslogtreecommitdiff
path: root/cmd/authzd
AgeCommit message (Collapse)Author
2025-09-12chore: read BIND_ADDR env variablemo khan
2025-07-17feat: migrate from Cedar to SpiceDB authorization systemmo khan
This is a major architectural change that replaces the Cedar policy-based authorization system with SpiceDB's relation-based authorization. Key changes: - Migrate from Rust to Go implementation - Replace Cedar policies with SpiceDB schema and relationships - Switch from envoy `ext_authz` with Cedar to SpiceDB permission checks - Update build system and dependencies for Go ecosystem - Maintain Envoy integration for external authorization This change enables more flexible permission modeling through SpiceDB's Google Zanzibar inspired relation-based system, supporting complex hierarchical permissions that were difficult to express in Cedar. Breaking change: Existing Cedar policies and Rust-based configuration will no longer work and need to be migrated to SpiceDB schema.
2025-06-18refactor: switch to a pure rust implementationmo khan
2025-05-23chore: append .git to module namemo khan
Apply workaround described in: https://docs.gitlab.com/user/project/use_project_as_go_package/#workaround-use-git-in-the-module-name
2025-05-23chore: update module name to match git locationmo khan
2025-05-02refactor: connect logging to http requestsmo khan
2025-05-02refactor: remove anything unrelated to the authz daemonmo khan
2025-04-01refactor: decouple authzd from cedar authorizermo khan
2025-03-28refactor: move authorizers into authz packagemo khan
2025-03-28feat: build entrypoint for golang rpc servermo khan
2025-03-28feat: initial commit for authzdmo khan