mirror of
https://github.com/pomerium/pomerium.git
synced 2025-05-01 11:26:29 +02:00
* ppl: refactor authorize to evaluate PPL * remove opa test step * add log statement * simplify assignment * deny with forbidden if logged in * add safeEval function * create evaluator-specific config and options * embed the headers rego file directly
9 lines
239 B
Go
9 lines
239 B
Go
// Package opa implements the policy evaluator interface to make authorization
|
|
// decisions.
|
|
package opa
|
|
|
|
import _ "embed" // to embed files
|
|
|
|
// HeadersRego is the headers.rego script.
|
|
//go:embed policy/headers.rego
|
|
var HeadersRego string
|