cedarling 0.0.43

The Cedarling: a high-performance local authorization service powered by the Rust Cedar Engine.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29

// This software is available under the Apache-2.0 license.
// See https://www.apache.org/licenses/LICENSE-2.0.txt for full text.
//
// Copyright (c) 2024, Gluu, Inc.

use serde::{Deserialize, Serialize};

/// Configuration to specify authorization workflow.
#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)]
pub struct AuthorizationConfig {
    /// Claim name used for decision logging (e.g. which JWT claim identifies the token).
    /// `CEDARLING_DECISION_LOG_DEFAULT_JWT_ID` in bootstrap properties documentation.
    pub decision_log_default_jwt_id: String,

    /// Whether to enforce Cedar schema validation.
    ///
    /// When `true` (default), a schema is required and policies/entities are validated
    /// against it. When `false`, Cedarling runs without schema-based validation.
    pub strict_schema_validation: bool,
}

impl Default for AuthorizationConfig {
    fn default() -> Self {
        Self {
            decision_log_default_jwt_id: "jti".to_string(),
            strict_schema_validation: true,
        }
    }
}