Struct AuthzEngine 

pub struct AuthzEngine { /* private fields */ }

The main authorization engine

Implementations

impl AuthzEngine

pub async fn new(database_url: &str) -> Result<Self>

Create a new authorization engine

pub fn bloom_stats(&self) -> BloomStats

Get the Bloom filter statistics

pub fn bloom_filter(&self) -> &AuthzBloomFilter

Get a reference to the Bloom filter

pub async fn write_tuple(&self, tuple: RelationTuple) -> Result<()>

Write a relation tuple

pub async fn delete_tuple(&self, tuple: RelationTuple) -> Result<()>

Delete a relation tuple

pub async fn check(&self, request: CheckRequest) -> Result<CheckResponse>

Check if a subject has a relation to an object

pub async fn expand(&self, request: ExpandRequest) -> Result<ExpandResponse>

Expand a relation to find all subjects

pub async fn migrate(&self) -> Result<()>

Run database migrations

pub async fn batch_check( &self, requests: &[CheckRequest], ) -> Result<Vec<CheckResponse>>

Batch check multiple authorization requests efficiently

This method uses Bloom filter to skip definitely non-existent tuples and PostgreSQL ANY() for efficient batch queries.

Performance targets:

• 100 checks: <50ms total
• Bloom filter reduces DB queries by ~50%

pub async fn warm_bloom_filter(&self) -> Result<usize>

Load existing tuples into the Bloom filter (for warm-up)