| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2025-07-17 | feat: migrate from Cedar to SpiceDB authorization system | mo khan | |
| This is a major architectural change that replaces the Cedar policy-based authorization system with SpiceDB's relation-based authorization. Key changes: - Migrate from Rust to Go implementation - Replace Cedar policies with SpiceDB schema and relationships - Switch from envoy `ext_authz` with Cedar to SpiceDB permission checks - Update build system and dependencies for Go ecosystem - Maintain Envoy integration for external authorization This change enables more flexible permission modeling through SpiceDB's Google Zanzibar inspired relation-based system, supporting complex hierarchical permissions that were difficult to express in Cedar. Breaking change: Existing Cedar policies and Rust-based configuration will no longer work and need to be migrated to SpiceDB schema. | |||
| 2025-06-18 | refactor: switch to a pure rust implementation | mo khan | |
| 2025-06-02 | feat: provide minimal `ext-authz` implementation | mo khan | |
| https://www.envoyproxy.io/docs/envoy/latest/configuration/http/http_filters/ext_authz_filter | |||
| 2025-05-21 | chore: remove nats | mo khan | |
| 2025-05-02 | refactor: connect logging to http requests | mo khan | |
| 2025-05-02 | refactor: remove anything unrelated to the authz daemon | mo khan | |
| 2025-04-07 | chore: generate twirp rpc for golang | mo khan | |
| 2025-04-07 | chore: add tls config | mo khan | |
| 2025-04-04 | refactor: switch to zerolog logger | mo khan | |
| 2025-04-03 | chore: install cedar CLI | mo khan | |
| 2025-04-03 | refactor: remove slog-http | mo khan | |
| 2025-03-31 | chore: export step env vars with each command | mo khan | |
| 2025-03-31 | chore: run local certificate authority | mo khan | |
| 2025-03-31 | chore: add smallstep ca | mo khan | |
| 2025-03-28 | chore: install nats-server | mo khan | |
| 2025-03-28 | feat: generate golang rpc client/server | mo khan | |
| 2025-03-27 | feat: start to add structured logging | mo khan | |
| 2025-03-20 | feat: add a cedar policy | mo khan | |
| 2025-03-15 | refactor: authorize unsigned JWT in requests | mo khan | |
| 2025-03-10 | chore: install mage using go tool | mo khan | |
| 2025-03-10 | test: add e2e spec for OIDC login | mo khan | |
| 2025-03-10 | chore: add some end to end tests | mo khan | |
| 2025-03-06 | refactor: use protobuf3 and define twirp service | mo khan | |
| 2025-03-06 | chore: install twirp plugin as go tool | mo khan | |
| 2025-03-05 | feat: connect the reverse proxy to a casbin policy enforcement and separate ↵ | mo khan | |
| hostnames | |||
| 2025-02-27 | chore: add magefile to run multiple servers | mo khan | |
 |
index : gitlab/authzd.git | |
| Authorization daemon | git |
| summaryrefslogtreecommitdiff |