3 Commits

Author	SHA1	Message	Date
Johan Fylling	a179a24c48	v1 API ... All packages, except for `cmd` and `internal`, have been moved into a new `v1` root package. Old packages are kept for backwards-compatibility reasons. All contained code is replaced with simple type aliases and proxy functions to `v1` implementations. Old packages default to the Rego v0 syntax, new `v1` packages default to the Rego v1 syntax. Signed-off-by: Johan Fylling <johan.dev@fylling.se>	2024-12-12 15:27:34 +01:00
Johan Fylling	7bb6dbe36b	Preparing for v1 API ... Moving (most) source to v1 root package to prepare for v0/v1 API separation. Signed-off-by: Johan Fylling <johan.dev@fylling.se>	2024-12-12 15:09:03 +01:00
Charlie Egan	b36da40ab6	[server/identifier] Support SPIFFEID use in authz (#5742) ... When using OPA TLS authorization, authz policy authors will now have access to the client certificates presented as part of the TLS connection. This new data will be available under the key `client_certificates`. The existing functionality where `identity` is set to the Subject RDN Sequence is left unchanged. When using x.509 SVIDs the SPIFFEID is presented as in the SANs of the certificate. So this change makes that data available should users require it. It also makes other information about the client cert available to authz policy too. Signed-off-by: Charlie Egan <charlie@styra.com>	2023-03-09 16:42:59 +00:00