Skip to main content

rskit_authz/
lib.rs

1//! Canonical RBAC + ABAC authorization engine with deny-override semantics.
2
3#![warn(missing_docs)]
4
5/// Core authorization checker trait.
6pub mod checker;
7/// Canonical authorization engine.
8pub mod engine;
9/// Wildcard permission matching.
10pub mod matcher;
11/// Tower authorization middleware.
12pub mod middleware;
13
14pub use checker::Checker;
15pub use engine::{
16    AttributeSource, Attributes, Condition, Decision, Effect, Engine, Operator, Permission, Policy,
17    Request, Resource, Role, Subject,
18};
19pub use matcher::{match_any, match_pattern};
20pub use middleware::{AuthorizationLayer, AuthorizationService, RequestAuthorizer};
21
22mod boundary;
23
24pub use boundary::{AuthzDecision, AuthzRequest, Decider};