AuthZEN Interop

Topaz implementation of AuthZEN Todo Interop Scenario

Todo React App

Todo Backend

AuthZEN Proxy

Topaz Authorizer

AuthZEN payload

Requests

User

rick@the-citadel.com

{
  "id": "rick@the-citadel.com",
  "name": "Rick Sanchez",
  "email": "rick@the-citadel.com",
  "roles": [
    "admin",
    "evil_genius"
  ]
}

Operation

GET /users/:userId

User

rick@the-citadel.com

AuthZEN Payload

{
  "subject": {
    "type": "user",
    "id": "rick@the-citadel.com"
  },
  "action": {
    "name": "can_read_user"
  },
  "resource": {
    "type": "user",
    "id": "rick@the-citadel.com"
  },
  "context": {}
}

{
  "subject": {
    "type": "user",
    "id": "rick@the-citadel.com"
  },
  "action": {
    "name": "can_read_user"
  },
  "resource": {
    "type": "user",
    "id": "rick@the-citadel.com"
  },
  "context": {}
}

Response

Authorizer Module


package todoApp.can_read_user

default allowed = true