summaryrefslogtreecommitdiff
path: root/src/authorization/check_service.rs
AgeCommit message (Collapse)Author
2025-07-17feat: migrate from Cedar to SpiceDB authorization systemmo khan
This is a major architectural change that replaces the Cedar policy-based authorization system with SpiceDB's relation-based authorization. Key changes: - Migrate from Rust to Go implementation - Replace Cedar policies with SpiceDB schema and relationships - Switch from envoy `ext_authz` with Cedar to SpiceDB permission checks - Update build system and dependencies for Go ecosystem - Maintain Envoy integration for external authorization This change enables more flexible permission modeling through SpiceDB's Google Zanzibar inspired relation-based system, supporting complex hierarchical permissions that were difficult to express in Cedar. Breaking change: Existing Cedar policies and Rust-based configuration will no longer work and need to be migrated to SpiceDB schema.
2025-07-05chore: remove unhelpful loggingmo khan
2025-07-02chore: add minimal loggingmo khan
2025-07-02chore: remove logging interceptormo khan
2025-06-27refactor: fix typo in log messagemo khan
2025-06-26test: tidy up the testsmo khan
2025-06-26chore: add minimal basic loggingmo khan
2025-06-26feat: add some debug loggingmo khan
2025-06-25test: move unit tests to integration test suite to share codemo khan
2025-06-24refactor: copy duplicate test helper methodmo khan
2025-06-24feat: connect check service to a minimal cedar policymo khan
2025-06-19refactor: split types into separate filesmo khan