Skip to main content

evaluate_request

Function evaluate_request 

Source
pub fn evaluate_request(
    policy: &dyn RequestPolicy,
    context: &RequestContext<'_>,
) -> AuthorizationDecision
Expand description

Applies the mandatory fail-closed identity gate before invoking a policy.

A missing principal resolves to AuthorizationDenial::SubjectUnknown without invoking the policy.