| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2025-07-17 | feat: migrate from Cedar to SpiceDB authorization system | mo khan | |
| This is a major architectural change that replaces the Cedar policy-based authorization system with SpiceDB's relation-based authorization. Key changes: - Migrate from Rust to Go implementation - Replace Cedar policies with SpiceDB schema and relationships - Switch from envoy `ext_authz` with Cedar to SpiceDB permission checks - Update build system and dependencies for Go ecosystem - Maintain Envoy integration for external authorization This change enables more flexible permission modeling through SpiceDB's Google Zanzibar inspired relation-based system, supporting complex hierarchical permissions that were difficult to express in Cedar. Breaking change: Existing Cedar policies and Rust-based configuration will no longer work and need to be migrated to SpiceDB schema. | |||
| 2025-06-18 | refactor: switch to a pure rust implementation | mo khan | |
| 2025-05-23 | chore: append .git to module name | mo khan | |
| Apply workaround described in: https://docs.gitlab.com/user/project/use_project_as_go_package/#workaround-use-git-in-the-module-name | |||
| 2025-05-23 | chore: update module name to match git location | mo khan | |
| 2025-05-02 | refactor: connect logging to http requests | mo khan | |
| 2025-05-02 | refactor: remove anything unrelated to the authz daemon | mo khan | |
| 2025-04-04 | refactor: switch to zerolog logger | mo khan | |
| 2025-04-01 | refactor: decouple authzd from cedar authorizer | mo khan | |
| 2025-03-28 | refactor: move authorizers into authz package | mo khan | |
| 2025-03-28 | feat: build entrypoint for golang rpc server | mo khan | |
| 2025-03-28 | feat: initial commit for authzd | mo khan | |
| 2025-03-27 | feat: start to add structured logging | mo khan | |
| 2025-03-15 | refactor: authorize unsigned JWT in requests | mo khan | |
| 2025-03-14 | fix: combine host and path in logs | mo khan | |
| 2025-03-13 | refactor: extract authz interface to test out different PaC libraries | mo khan | |
| 2025-03-13 | refactor: extract WithRoutes config option | mo khan | |
| 2025-03-13 | refactor: extract proxy package | mo khan | |
| 2025-03-13 | refactor: extract cfg package | mo khan | |
| 2025-03-13 | refactor: extract srv package | mo khan | |
| 2025-03-05 | feat: connect the reverse proxy to a casbin policy enforcement and separate ↵ | mo khan | |
| hostnames | |||
| 2025-03-04 | refactor: collapse director and server into usage | mo khan | |
| 2025-03-04 | feat: add API gateway to reverse proxy requests in front of two different ↵ | mo khan | |
| services | |||
| 2025-03-04 | Create entrypoint for api gateway | mo khan | |
