summaryrefslogtreecommitdiff
path: root/cmd/authzd/main.go
AgeCommit message (Collapse)Author
2025-09-12chore: rename ZED_ env vars to SPICEDB_HEADmainmo khan
2025-07-28chore: fix typo in startup logsmo khan
2025-07-25refactor: extract init to load ioc container with dependenciesmo khan
2025-07-23refactor: move LoadSchema into authz packagemo khan
2025-07-23chore: load the spicedb schema into spice at startupmo khan
2025-07-22feat: connect to spicedbmo khan
2025-07-02fix: check if an authzd host is providedmo khan
2025-07-02chore: provide port in authzd connection and connects with tls credentialsmo khan
2025-06-26feat: connect to the remove authorization daemonmo khan
2025-05-24chore: fixup startup logging in authzdmo khan
2025-05-23feat: add external authorization service (authzd) with JWT authenticationmo khan
- Add new authzd gRPC service implementing Envoy's external authorization API - Integrate JWT authentication filter in Envoy configuration with claim extraction - Update middleware to support both cookie-based and header-based user authentication - Add comprehensive test coverage for authorization service and server - Configure proper service orchestration with authzd, sparkled, and Envoy - Update build system and Docker configuration for multi-service deployment - Add grpcurl tool for gRPC service debugging and testing This enables fine-grained authorization control through Envoy's ext_authz filter while maintaining backward compatibility with existing cookie-based authentication.