assay-lua 0.10.4

General-purpose enhanced Lua runtime. Batteries-included scripting, automation, and web services.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51

--- @module assay.ory
--- @description Convenience umbrella for the Ory stack submodules (kratos, hydra, keto, rbac). Prefer requiring the individual submodules directly (e.g. assay.ory.kratos) if you only need one.
--- @keywords ory, stack, kratos, hydra, keto, rbac, identity, oauth2, oidc, authz, zanzibar, capability
--- @quickref ory.kratos.client(opts) -> kratos client | Kratos identity management
--- @quickref ory.hydra.client(opts) -> hydra client | Hydra OAuth2 and OIDC
--- @quickref ory.keto.client(read_url, opts?) -> keto client | Keto authorization (Zanzibar-style ReBAC)
--- @quickref ory.rbac.policy(opts) -> policy | Capability-based RBAC engine over Keto
--- @quickref ory.connect(opts) -> {kratos, hydra, keto} | Build all three clients in one call

local kratos = require("assay.ory.kratos")
local hydra = require("assay.ory.hydra")
local keto = require("assay.ory.keto")
local rbac = require("assay.ory.rbac")

local M = {
  kratos = kratos,
  hydra = hydra,
  keto = keto,
  rbac = rbac,
}

-- Convenience: build all three clients from a single options table.
-- opts: {
--   kratos_public, kratos_admin,
--   hydra_public, hydra_admin,
--   keto_read, keto_write,
-- }
-- Any URL left nil produces a client for that service that's limited to the
-- other endpoint (e.g. providing only kratos_public makes a read-only Kratos client).
function M.connect(opts)
  opts = opts or {}
  local result = {}
  if opts.kratos_public or opts.kratos_admin then
    result.kratos = kratos.client({
      public_url = opts.kratos_public,
      admin_url = opts.kratos_admin,
    })
  end
  if opts.hydra_public or opts.hydra_admin then
    result.hydra = hydra.client({
      public_url = opts.hydra_public,
      admin_url = opts.hydra_admin,
    })
  end
  if opts.keto_read then
    result.keto = keto.client(opts.keto_read, { write_url = opts.keto_write })
  end
  return result
end

return M