host

Documentation

Overview

Package host assembles one writable Datly-backed authz authority for an embedding application. It neither owns the SQL connection nor chooses an IdP.

Index

• type Config
• type Host
  • func New(ctx context.Context, config Config) (*Host, error)
  • func (h *Host) Close(ctx context.Context) error
• type Identity

Types

type Config

type Config struct {
	DB                *sql.DB
	Driver            string
	Identity          Identity
	Policies          []authz.Document
	Requirements      []gating.Binding
	EditorRoles       []string
	PolicyReplaceRule string // editor-roles (default) or manage-access
	Choices           gating.ChoicesProvider
	Directory         authz.Directory             // optional trusted policy-editor choice provider
	PolicyChoices     []authz.PolicyChoiceBinding // exact server-owned choices when no external directory is supplied
	Entities          gating.EntityPermissionProvider
	Entitlements      map[string]gating.EntitlementProvider
}

type Host

type Host struct {
	Services    *api.Services
	PolicyStore *policystore.Store
	GateStore   *gatesql.Store
}

func New

func New(ctx context.Context, config Config) (*Host, error)

func (*Host) Close

func (h *Host) Close(ctx context.Context) error

Close releases only the Datly policy component runtime. The caller owns DB.

type Identity

type Identity interface {
	authz.Provider
	gating.PrincipalResolver
}