Struct AuthzConfig 

#[non_exhaustive]
pub struct AuthzConfig {
    pub enabled: bool,
    pub endpoint: String,
    pub timeout_ms: u64,
    pub failure_mode_allow: bool,
}

External authorization via the Envoy ext_authz gRPC contract (envoy.service.auth.v3.Authorization/Check). Interops with OPA and any ext_authz server.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

enabled: bool

Enable external authorization for proxied API requests.

endpoint: String

gRPC address of the ext_authz server, e.g. http://opa:9191. Required when enabled; defaults to empty so a disabled block can omit it.

timeout_ms: u64

Per-request authorization call timeout, in milliseconds.

failure_mode_allow: bool

When the authz call itself fails (unreachable / timeout), allow the request through instead of denying. Defaults to false (fail closed).

Trait Implementations

impl Clone for AuthzConfig

fn clone(&self) -> AuthzConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthzConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for AuthzConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.