pomerium/authorize/evaluator/opa/opa.go
Caleb Doxsey dad35bcfb0
ppl: refactor authorize to evaluate PPL (#2224)
* ppl: refactor authorize to evaluate PPL

* remove opa test step

* add log statement

* simplify assignment

* deny with forbidden if logged in

* add safeEval function

* create evaluator-specific config and options

* embed the headers rego file directly
2021-05-21 09:50:18 -06:00

9 lines
239 B
Go

// Package opa implements the policy evaluator interface to make authorization
// decisions.
package opa
import _ "embed" // to embed files
// HeadersRego is the headers.rego script.
//go:embed policy/headers.rego
var HeadersRego string