pomerium/authorize/evaluator
Kenneth Jenkins ffca3b36a9
authorize: reuse policy evaluators where possible (#4710)
Add a parameter to evaluator.New() for the previous Evaluator (if any).
If the evaluatorConfig is the same, reuse any PolicyEvaluators for
policies that have not changed from the previous Evaluator.

Use the route IDs along with the policy checksums to determine whether a
given policy has changed. Similarly, add a new cacheKey() method to the
evaluatorConfig to compute a checksum used for determine whether the
evaluatorConfig has changed. (Store this checksum on the Evaluator.)
2023-11-06 13:57:59 -08:00
..
opa config: remove set_authorization_header option (#4489) 2023-08-29 09:02:08 -07:00
config.go authorize: reuse policy evaluators where possible (#4710) 2023-11-06 13:57:59 -08:00
evaluator.go authorize: reuse policy evaluators where possible (#4710) 2023-11-06 13:57:59 -08:00
evaluator_test.go authorize: reuse policy evaluators where possible (#4710) 2023-11-06 13:57:59 -08:00
functions.go authorize: check CRLs only for leaf certificates (#4480) 2023-08-23 09:07:32 -07:00
functions_test.go authorize: check CRLs only for leaf certificates (#4480) 2023-08-23 09:07:32 -07:00
gen-test-certs.go config: support client certificate SAN match (#4453) 2023-08-11 13:27:12 -07:00
google_cloud_serverless.go config: remove source, remove deadcode, fix linting issues (#4118) 2023-04-21 17:25:11 -06:00
google_cloud_serverless_test.go authorize: move headers and jwt signing to rego (#1856) 2021-02-08 10:53:21 -07:00
headers_evaluator.go config: remove set_authorization_header option (#4489) 2023-08-29 09:02:08 -07:00
headers_evaluator_test.go config: remove set_authorization_header option (#4489) 2023-08-29 09:02:08 -07:00
policy_evaluator.go authorize: reuse policy evaluators where possible (#4710) 2023-11-06 13:57:59 -08:00
policy_evaluator_test.go config: add new mTLS enforcement setting (#4443) 2023-08-09 07:53:11 -07:00