summaryrefslogtreecommitdiff
path: root/cmd
AgeCommit message (Collapse)Author
2025-09-12chore: read BIND_ADDR env variablemo khan
2025-07-17feat: migrate from Cedar to SpiceDB authorization systemmo khan
This is a major architectural change that replaces the Cedar policy-based authorization system with SpiceDB's relation-based authorization. Key changes: - Migrate from Rust to Go implementation - Replace Cedar policies with SpiceDB schema and relationships - Switch from envoy `ext_authz` with Cedar to SpiceDB permission checks - Update build system and dependencies for Go ecosystem - Maintain Envoy integration for external authorization This change enables more flexible permission modeling through SpiceDB's Google Zanzibar inspired relation-based system, supporting complex hierarchical permissions that were difficult to express in Cedar. Breaking change: Existing Cedar policies and Rust-based configuration will no longer work and need to be migrated to SpiceDB schema.
2025-06-18refactor: switch to a pure rust implementationmo khan
2025-05-23chore: append .git to module namemo khan
Apply workaround described in: https://docs.gitlab.com/user/project/use_project_as_go_package/#workaround-use-git-in-the-module-name
2025-05-23chore: update module name to match git locationmo khan
2025-05-02refactor: connect logging to http requestsmo khan
2025-05-02refactor: remove anything unrelated to the authz daemonmo khan
2025-04-04refactor: switch to zerolog loggermo khan
2025-04-01refactor: decouple authzd from cedar authorizermo khan
2025-03-28refactor: move authorizers into authz packagemo khan
2025-03-28feat: build entrypoint for golang rpc servermo khan
2025-03-28feat: initial commit for authzdmo khan
2025-03-27feat: start to add structured loggingmo khan
2025-03-15refactor: authorize unsigned JWT in requestsmo khan
2025-03-14fix: combine host and path in logsmo khan
2025-03-13refactor: extract authz interface to test out different PaC librariesmo khan
2025-03-13refactor: extract WithRoutes config optionmo khan
2025-03-13refactor: extract proxy packagemo khan
2025-03-13refactor: extract cfg packagemo khan
2025-03-13refactor: extract srv packagemo khan
2025-03-05feat: connect the reverse proxy to a casbin policy enforcement and separate ↵mo khan
hostnames
2025-03-04refactor: collapse director and server into usagemo khan
2025-03-04feat: add API gateway to reverse proxy requests in front of two different ↵mo khan
services
2025-03-04Create entrypoint for api gatewaymo khan