summaryrefslogtreecommitdiff
path: root/pkg/authz/server.go
AgeCommit message (Collapse)Author
2025-07-22feat: connect to spicedbmo khan
2025-07-21chore: provide local check service as the defaultmo khan
2025-07-11refactor: use remote service when it is availablemo khan
2025-07-11refactor: rename CheckService to LocalCheckServicemo khan
2025-07-11chore: split the RemoteCheckService from the LocalCheckServicemo khan
2025-07-02fix: check if an authzd host is providedmo khan
2025-07-02chore: fix AUTHZD_HOST valuemo khan
2025-06-26feat: connect to the remove authorization daemonmo khan
2025-05-24refactor: do not make rpc call from authzdmo khan
2025-05-23feat: delegate to the remote authzd to check if the permission is grantedmo khan
2025-05-23feat: add external authorization service (authzd) with JWT authenticationmo khan
- Add new authzd gRPC service implementing Envoy's external authorization API - Integrate JWT authentication filter in Envoy configuration with claim extraction - Update middleware to support both cookie-based and header-based user authentication - Add comprehensive test coverage for authorization service and server - Configure proper service orchestration with authzd, sparkled, and Envoy - Update build system and Docker configuration for multi-service deployment - Add grpcurl tool for gRPC service debugging and testing This enables fine-grained authorization control through Envoy's ext_authz filter while maintaining backward compatibility with existing cookie-based authentication.