Struct OpaClient 

pub struct OpaClient { /* private fields */ }

Client for evaluating authorization decisions against an OPA server.

Implementations

impl OpaClient

pub fn new(config: OpaConfig) -> Result<Self>

Create a new OPA client.

pub async fn query( &self, policy_path: &str, input: Value, ) -> Result<OpaResponse>

Evaluate a policy at the given path with the provided input.

Arguments

• policy_path — The Rego package/rule path (e.g., authz/allow)
• input — Arbitrary JSON input for the policy

Example

let client = OpaClient::new(OpaConfig::default())?;
let input = serde_json::json!({
    "user": "alice",
    "action": "read",
    "resource": "/documents/secret"
});
let response = client.query("authz/allow", input).await?;
if response.is_allowed() {
    println!("Access granted");
}

pub async fn evaluate(&self, input: Value) -> Result<OpaResponse>

Evaluate the default policy path.

pub async fn is_allowed(&self, input: Value) -> Result<bool>

Convenience: check if the default policy allows the given input.

pub async fn health_check(&self) -> Result<bool>

Check OPA server health.

pub async fn put_policy(&self, policy_id: &str, rego: &str) -> Result<()>

Upload a Rego policy to OPA.

pub async fn delete_policy(&self, policy_id: &str) -> Result<()>

Delete a policy from OPA.

pub async fn put_data(&self, data_path: &str, data: Value) -> Result<()>

Upload data to OPA’s data store.

pub async fn clear_cache(&self)

Clear the response cache.

pub async fn cache_size(&self) -> usize

Get the number of cached entries.