From 45df4d0d9b577fecee798d672695fe24ff57fb1b Mon Sep 17 00:00:00 2001 From: mo khan Date: Tue, 15 Jul 2025 16:37:08 -0600 Subject: feat: migrate from Cedar to SpiceDB authorization system This is a major architectural change that replaces the Cedar policy-based authorization system with SpiceDB's relation-based authorization. Key changes: - Migrate from Rust to Go implementation - Replace Cedar policies with SpiceDB schema and relationships - Switch from envoy `ext_authz` with Cedar to SpiceDB permission checks - Update build system and dependencies for Go ecosystem - Maintain Envoy integration for external authorization This change enables more flexible permission modeling through SpiceDB's Google Zanzibar inspired relation-based system, supporting complex hierarchical permissions that were difficult to express in Cedar. Breaking change: Existing Cedar policies and Rust-based configuration will no longer work and need to be migrated to SpiceDB schema. --- .../security-framework-sys/src/digest_transform.rs | 28 ---------------------- 1 file changed, 28 deletions(-) delete mode 100644 vendor/security-framework-sys/src/digest_transform.rs (limited to 'vendor/security-framework-sys/src/digest_transform.rs') diff --git a/vendor/security-framework-sys/src/digest_transform.rs b/vendor/security-framework-sys/src/digest_transform.rs deleted file mode 100644 index fdcf6ee2..00000000 --- a/vendor/security-framework-sys/src/digest_transform.rs +++ /dev/null @@ -1,28 +0,0 @@ -use core_foundation_sys::base::{CFIndex, CFTypeRef}; -use core_foundation_sys::error::CFErrorRef; -use core_foundation_sys::string::CFStringRef; - -use crate::transform::SecTransformRef; - -extern "C" { - pub static kSecDigestHMACKeyAttribute: CFStringRef; - pub static kSecDigestHMACMD5: CFStringRef; - pub static kSecDigestHMACSHA1: CFStringRef; - pub static kSecDigestHMACSHA2: CFStringRef; - pub static kSecDigestLengthAttribute: CFStringRef; - pub static kSecDigestMD2: CFStringRef; - pub static kSecDigestMD4: CFStringRef; - pub static kSecDigestMD5: CFStringRef; - pub static kSecDigestSHA1: CFStringRef; - pub static kSecDigestSHA2: CFStringRef; - pub static kSecDigestTypeAttribute: CFStringRef; - - pub fn SecDigestTransformCreate( - digestType: CFTypeRef, - digestLength: CFIndex, - error: *mut CFErrorRef, - ) -> SecTransformRef; - -// this symbol is apparently missing in 10.13.3? -// pub fn SecDigestTransformGetTypeID() -> CFTypeID; -} -- cgit v1.2.3