diff --git a/interop/authzen-interop-website/docs/scenarios/todo-1.0-id/_category_.json b/interop/authzen-interop-website/docs/scenarios/todo-1.0-id/_category_.json new file mode 100644 index 0000000..6460daa --- /dev/null +++ b/interop/authzen-interop-website/docs/scenarios/todo-1.0-id/_category_.json @@ -0,0 +1,8 @@ +{ + "label": "Todo (1.0 Spec)", + "position": 2, + "link": { + "type": "generated-index", + "description": "Authorization scenarios defined by the AuthZEN WG." + } +} diff --git a/interop/authzen-interop-website/docs/scenarios/todo-1.0-id/index.md b/interop/authzen-interop-website/docs/scenarios/todo-1.0-id/index.md new file mode 100644 index 0000000..d894a59 --- /dev/null +++ b/interop/authzen-interop-website/docs/scenarios/todo-1.0-id/index.md @@ -0,0 +1,390 @@ +--- +sidebar_position: 2 +--- + +# Todo Application + +This document lists the request and response payloads for each of the API requests in the Todo interop scenario. + +> Note: These payloads and corresponding interop results are for the [AuthZEN 1.0 Implementers Draft](https://openid.github.io/authzen/authorization-api-1_0_01) version of the spec. + +:::tip +This is a copy of the payload document defined by the AuthZEN WG. The definitive document can be found [here](https://hackmd.io/gNZBRoTfRgWh_PNM0y2wDA?view). +::: + +## Version history + +- 2024-09-23: moved all non-`type`/`id` fields in `subject` and `resource` into the respective `properties` field, to make the payloads compliant with AuthZEN 1.0-01 (Implementer's Draft). +- 2024-08-13: added `id` keys to all `subject` and `resource` fields to make them compliant with AuthZEN 1.0. +- 2024-02-15: initial draft. + +## Overview of the scenario + +The Todo application manages a shared todo list between a set of users. + +There are 5 actions that the Todo application supports, each with a permission associated with it: + +| Action | Permission | +| ------------------------- | ----------------- | +| View a user's information | `can_read_user` | +| View all Todos | `can_read_todos` | +| Create a Todo | `can_create_todo` | +| (Un)complete a Todo | `can_update_todo` | +| Delete a Todo | `can_delete_todo` | + +There are four roles defined: + +- `viewer` - able to view the shared todo list (`can_read_todos`), as well as information about each of the owners of a Todo (notably, their picture) (`can_read_user`) +- `editor` - `viewer` + the ability to create new Todos (`can_create_todo`), as well as edit and delete Todos _that are owned by that user_ +- `admin` - `editor` + the ability to delete any Todos (`can_delete_todo`) +- `evil_genius` - `editor` + the ability to edit Todos that don't belong to the user (`can_update_todo`) + +There are 5 users defined (based on the "Rick & Morty" cartoon), each with one (or more) roles, defined below in the Subjects section. + +## Component description + +The interop consists of the following components: + +- a simple React frontend that manages Todo lists. +- a Node.JS backend that serves 5 routes that the frontend talks to. +- external PDPs provided by the interop participants, which the Node.JS backend calls using the AuthZEN API to issue authorization decisions. + +The URIs listed in the document below are the contracts between the React app and the Node.JS backend. + +The Node.JS backend will take two environment variables - **AUTHZEN_PDP_URL** and **AUTHZEN_PDP_API_KEY** - and use the **AUTHZEN_PDP_URL** to formulate the REST API call to the PDP, using the **AUTHZEN_PDP_API_KEY** as the Authorization header. + +The payloads listed below are the contract between the Node.JS backend and the PDP. + +The node.js backend is the PEP. + +## Subjects + +Note: in every request payload, the subject indicated by `` is one of the following strings: + +| User | PID | +| ------------ | ------------------------------------------------------------ | +| Rick Sanchez | CiRmZDA2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs | +| Morty Smith | CiRmZDE2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs | +| Summer Smith | CiRmZDI2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs | +| Beth Smith | CiRmZDM2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs | +| Jerry Smith | CiRmZDQ2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs | + +This will be extracted from the `sub` claim in the JWT passed in as a bearer token in the Authorization header of each request, and passed into the AuthZEN request. + +## Attributes associated with users (expected to come from PIP) + +These are noted below in JSON format, with the key being the PID string from the table above, and the value being a set of attributes associated with the user. + +```js +{ + "CiRmZDA2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs": { + "id": "rick@the-citadel.com", + "name": "Rick Sanchez", + "email": "rick@the-citadel.com", + "roles": ["admin", "evil_genius"], + "picture": "https://www.topaz.sh/assets/templates/citadel/img/Rick%20Sanchez.jpg" + }, + "CiRmZDM2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs": { + "id": "beth@the-smiths.com", + "name": "Beth Smith", + "email": "beth@the-smiths.com", + "roles": ["viewer"], + "picture": "https://www.topaz.sh/assets/templates/citadel/img/Beth%20Smith.jpg" + }, + "CiRmZDE2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs": { + "id": "morty@the-citadel.com", + "name": "Morty Smith", + "email": "morty@the-citadel.com", + "roles": ["editor"], + "picture": "https://www.topaz.sh/assets/templates/citadel/img/Morty%20Smith.jpg" + }, + "CiRmZDI2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs": { + "id": "summer@the-smiths.com", + "name": "Summer Smith", + "email": "summer@the-smiths.com", + "roles": ["editor"], + "picture": "https://www.topaz.sh/assets/templates/citadel/img/Summer%20Smith.jpg" + }, + "CiRmZDQ2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs": { + "id": "jerry@the-smiths.com", + "name": "Jerry Smith", + "email": "jerry@the-smiths.com", + "roles": ["viewer"], + "picture": "https://www.topaz.sh/assets/templates/citadel/img/Jerry%20Smith.jpg" + } +} +``` + +The PIP can, of course, express this in any way they desire. The policy for each implementation has its own contract with its PIP, and this contract is outside of the scope of the PEP-PDP interop scenario. + +## Requests and payloads + +### `GET /users/{userID}` + +Get information (e.g. email, picture) associated with a user. This is used by the backend to render the picture of the user that owns each todo. + +For simplicity, the policy always returns `true`. + +#### Request payload + +```js +{ + "subject": { + "type": "user", + "id": "", + "identity": "" + }, + "action": { + "name": "can_read_user" + }, + "resource": { + "type": "user", + "id": "", + "userID": "" + }, + "context": { + } +} +``` + +#### Response payload + +For every subject and resource combination: + +```js +{ + "decision": true +} +``` + +### `GET /todos` + +Get the list of todos. + +For simplicity, the policy always returns `true` for every user. + +#### Request payload + +```js +{ + "subject": { + "type": "user", + "id": "" + }, + "action": { + "name": "can_read_todos" + }, + "resource": { + "type": "todo", + "id": "todo-1" + }, + "context": { + } +} +``` + +#### Response payload + +For every subject and resource combination: + +```js +{ + "decision": true +} +``` + +### `POST /todos` + +Create a new todo. + +The policy evaluates the subject's `roles` attribute to determine whether the user can create a new todo. + +#### Request payload + +```js +{ + "subject": { + "type": "user", + "id": "" + }, + "action": { + "name": "can_create_todo" + }, + "resource": { + "type": "todo", + "id": "todo-1" + }, + "context": { + } +} +``` + +#### Response payload + +Only users with a `roles` attribute that contains `admin` or `editor` return a `true` decision. In the user set above, this includes Rick, Morty, and Summer. + +```js +{ + "decision": true +} +``` + +For the other two users, Beth and Jerry, the decision is `false`. + +```js +{ + "decision": false +} +``` + +### `PUT /todos/{id}` + +Edit (complete) a todo. + +The policy allows the operation if the subject's `roles` attribute contains the `evil_genius` role, OR if the subject's `roles` contains the `editor` role AND the subject is the owner of the todo. + +The `resource.properties` contains an attribute called `ownerID` which contains the `id` of the owner (which is defined in the "Attributes" section above, and is the email address of the owner). + +#### Request payload + +```js +{ + "subject": { + "type": "user", + "id": "" + }, + "action": { + "name": "can_update_todo" + }, + "resource": { + "type": "todo", + "id": "", + "properties": { + "ownerID": "" + } + }, + "context": { + } +} +``` + +> Notes: +> +> 1. `resource.id` is a UUID representing the Todo, but since the PDPs are not assumed to be stateful, `resource.properties.ownerID` is passed in as a way to designate a Todo's owner. + +#### Response payload + +Only users with a `roles` attribute that contains `evil_genius` (Rick), OR the owner of the todo, return a `true` decision. + +For the user Morty, the following request will return a `true` decision: + +```js +{ + "subject": { + "type": "user", + "id": "CiRmZDE2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_update_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "properties": { + "ownerID": "morty@the-citadel.com" + } + }, + "context": { + } +} +``` + +```js +{ + "decision": true +} +``` + +For a different value of `ownerID`, the decision will be `false`: + +```js +{ + "decision": false +} +``` + +### `DELETE /todos/{id}` + +Delete a todo. + +The policy allows the operation if the subject's `roles` attribute contains the `admin` role, OR if the subject's `roles` contains the `editor` role AND the subject is the owner of the todo. + +The `resource.properties` contains an attribute called `ownerID` which contains the `id` of the owner (which is defined in the "Attributes" section above, and is the email address of the owner). + +#### Request payload + +```js +{ + "subject": { + "type": "user", + "id": "" + }, + "action": { + "name": "can_delete_todo" + }, + "resource": { + "type": "todo", + "id": "", + "properties": { + "ownerID": "" + } + }, + "context": { + } +} +``` + +> Notes: +> +> 1. `resource.id` is a UUID representing the Todo, but since the PDPs are not assumed to be stateful, `resource.properties.ownerID` is passed in as a way to designate a Todo's owner. + +#### Response payload + +Only users with a `roles` attribute that contains `admin` (Rick), OR the owner of the todo, return a `true` decision. + +For the user Morty, the following request will return a `true` decision: + +```js +{ + "subject": { + "type": "user", + "id": "CiRmZDE2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_delete_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "properties": { + "ownerID": "morty@the-citadel.com" + } + }, + "context": { + } +} +``` + +```js +{ + "decision": true +} +``` + +For a different value of `ownerID`, the decision will be `false`: + +```js +{ + "decision": false +} +``` diff --git a/interop/authzen-interop-website/docs/scenarios/todo-1.0-id/results/_category_.json b/interop/authzen-interop-website/docs/scenarios/todo-1.0-id/results/_category_.json new file mode 100644 index 0000000..1a3992b --- /dev/null +++ b/interop/authzen-interop-website/docs/scenarios/todo-1.0-id/results/_category_.json @@ -0,0 +1,7 @@ +{ + "label": "Results", + "position": 3, + "link": { + "type": "generated-index" + } +} diff --git a/interop/authzen-interop-website/docs/scenarios/todo-1.0-id/results/aserto.md b/interop/authzen-interop-website/docs/scenarios/todo-1.0-id/results/aserto.md new file mode 100644 index 0000000..5fe1c53 --- /dev/null +++ b/interop/authzen-interop-website/docs/scenarios/todo-1.0-id/results/aserto.md @@ -0,0 +1,973 @@ +--- +sidebar_position: 1 +--- + +# Aserto + +Interop results for the [Aserto](https://www.aserto.com/) implementation hosted at https://authzen-proxy.demo.aserto.com. + +For more information, please refer to the [code](https://github.com/aserto-dev/authzen-topaz-proxy) and [playground](https://authzen-proxy.demo.aserto.com), demonstrating the scenario. + +## Test results + +```bash +yarn test https://authzen-proxy.demo.aserto.com markdown +yarn run v1.22.19 +$ node build/test/runner.js https://authzen-proxy.demo.aserto.com markdown +``` + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
resultrequest
PASS + +```js +{ + "subject": { + "type": "user", + "id": "rick@the-citadel.com", + "identity": "CiRmZDA2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_user" + }, + "resource": { + "type": "user", + "id": "beth@the-smiths.com", + "userID": "beth@the-smiths.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "rick@the-citadel.com", + "identity": "CiRmZDA2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_user" + }, + "resource": { + "type": "user", + "id": "rick@the-citadel.com", + "userID": "CiRmZDA2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "rick@the-citadel.com", + "identity": "CiRmZDA2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_todos" + }, + "resource": { + "type": "todo", + "id": "todo-1" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "rick@the-citadel.com", + "identity": "CiRmZDA2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_create_todo" + }, + "resource": { + "type": "todo", + "id": "todo-1" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "rick@the-citadel.com", + "identity": "CiRmZDA2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_update_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "rick@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "rick@the-citadel.com", + "identity": "CiRmZDA2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_update_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "morty@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "rick@the-citadel.com", + "identity": "CiRmZDA2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_delete_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "rick@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "rick@the-citadel.com", + "identity": "CiRmZDA2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_delete_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "morty@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "morty@the-citadel.com", + "identity": "CiRmZDE2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_user" + }, + "resource": { + "type": "user", + "id": "beth@the-smiths.com", + "userID": "beth@the-smiths.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "morty@the-citadel.com", + "identity": "CiRmZDE2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_user" + }, + "resource": { + "type": "user", + "id": "morty@the-citadel.com", + "userID": "CiRmZDE2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "morty@the-citadel.com", + "identity": "CiRmZDE2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_todos" + }, + "resource": { + "type": "todo", + "id": "todo-1" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "morty@the-citadel.com", + "identity": "CiRmZDE2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_create_todo" + }, + "resource": { + "type": "todo", + "id": "todo-1" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "morty@the-citadel.com", + "identity": "CiRmZDE2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_update_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "rick@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "morty@the-citadel.com", + "identity": "CiRmZDE2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_update_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "morty@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "morty@the-citadel.com", + "identity": "CiRmZDE2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_delete_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "rick@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "morty@the-citadel.com", + "identity": "CiRmZDE2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_delete_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "morty@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "summer@the-smiths.com", + "identity": "CiRmZDI2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_user" + }, + "resource": { + "type": "user", + "id": "beth@the-smiths.com", + "userID": "beth@the-smiths.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "summer@the-smiths.com", + "identity": "CiRmZDI2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_user" + }, + "resource": { + "type": "user", + "id": "summer@the-smiths.com", + "userID": "CiRmZDI2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "summer@the-smiths.com", + "identity": "CiRmZDI2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_todos" + }, + "resource": { + "type": "todo", + "id": "todo-1" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "summer@the-smiths.com", + "identity": "CiRmZDI2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_create_todo" + }, + "resource": { + "type": "todo", + "id": "todo-1" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "summer@the-smiths.com", + "identity": "CiRmZDI2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_update_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "rick@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "summer@the-smiths.com", + "identity": "CiRmZDI2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_update_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "summer@the-smiths.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "summer@the-smiths.com", + "identity": "CiRmZDI2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_delete_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "rick@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "summer@the-smiths.com", + "identity": "CiRmZDI2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_delete_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "summer@the-smiths.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "beth@the-smiths.com", + "identity": "CiRmZDM2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_user" + }, + "resource": { + "type": "user", + "id": "beth@the-smiths.com", + "userID": "beth@the-smiths.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "beth@the-smiths.com", + "identity": "CiRmZDM2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_user" + }, + "resource": { + "type": "user", + "id": "beth@the-smiths.com", + "userID": "CiRmZDM2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "beth@the-smiths.com", + "identity": "CiRmZDM2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_todos" + }, + "resource": { + "type": "todo", + "id": "todo-1" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "beth@the-smiths.com", + "identity": "CiRmZDM2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_create_todo" + }, + "resource": { + "type": "todo", + "id": "todo-1" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "beth@the-smiths.com", + "identity": "CiRmZDM2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_update_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "rick@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "beth@the-smiths.com", + "identity": "CiRmZDM2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_update_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "beth@the-smiths.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "beth@the-smiths.com", + "identity": "CiRmZDM2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_delete_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "rick@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "beth@the-smiths.com", + "identity": "CiRmZDM2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_delete_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "beth@the-smiths.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "jerry@the-smiths.com", + "identity": "CiRmZDQ2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_user" + }, + "resource": { + "type": "user", + "id": "beth@the-smiths.com", + "userID": "beth@the-smiths.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "jerry@the-smiths.com", + "identity": "CiRmZDQ2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_user" + }, + "resource": { + "type": "user", + "id": "jerry@the-smiths.com", + "userID": "CiRmZDQ2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "jerry@the-smiths.com", + "identity": "CiRmZDQ2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_todos" + }, + "resource": { + "type": "todo", + "id": "todo-1" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "jerry@the-smiths.com", + "identity": "CiRmZDQ2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_create_todo" + }, + "resource": { + "type": "todo", + "id": "todo-1" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "jerry@the-smiths.com", + "identity": "CiRmZDQ2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_update_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "rick@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "jerry@the-smiths.com", + "identity": "CiRmZDQ2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_update_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "jerry@the-smiths.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "jerry@the-smiths.com", + "identity": "CiRmZDQ2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_delete_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "rick@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "jerry@the-smiths.com", + "identity": "CiRmZDQ2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_delete_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "jerry@the-smiths.com" + } +} +``` + +
\ No newline at end of file diff --git a/interop/authzen-interop-website/docs/scenarios/todo-1.0-id/results/cerbos.md b/interop/authzen-interop-website/docs/scenarios/todo-1.0-id/results/cerbos.md new file mode 100644 index 0000000..4520d24 --- /dev/null +++ b/interop/authzen-interop-website/docs/scenarios/todo-1.0-id/results/cerbos.md @@ -0,0 +1,971 @@ +--- +sidebar_position: 2 +--- + +# Cerbos + +Interop results for the [Cerbos](https://cerbos.dev) implementation hosted at `https://authzen-proxy-demo.cerbos.dev`. + +## Test results + +```bash +yarn test https://authzen-proxy-demo.cerbos.dev markdown +yarn run v1.22.19 +$ node build/test/runner.js https://authzen-proxy-demo.cerbos.dev markdown +``` + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
resultrequest
PASS + +```js +{ + "subject": { + "type": "user", + "id": "rick@the-citadel.com", + "identity": "CiRmZDA2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_user" + }, + "resource": { + "type": "user", + "id": "beth@the-smiths.com", + "userID": "beth@the-smiths.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "rick@the-citadel.com", + "identity": "CiRmZDA2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_user" + }, + "resource": { + "type": "user", + "id": "rick@the-citadel.com", + "userID": "CiRmZDA2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "rick@the-citadel.com", + "identity": "CiRmZDA2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_todos" + }, + "resource": { + "type": "todo", + "id": "todo-1" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "rick@the-citadel.com", + "identity": "CiRmZDA2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_create_todo" + }, + "resource": { + "type": "todo", + "id": "todo-1" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "rick@the-citadel.com", + "identity": "CiRmZDA2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_update_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "rick@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "rick@the-citadel.com", + "identity": "CiRmZDA2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_update_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "morty@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "rick@the-citadel.com", + "identity": "CiRmZDA2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_delete_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "rick@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "rick@the-citadel.com", + "identity": "CiRmZDA2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_delete_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "morty@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "morty@the-citadel.com", + "identity": "CiRmZDE2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_user" + }, + "resource": { + "type": "user", + "id": "beth@the-smiths.com", + "userID": "beth@the-smiths.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "morty@the-citadel.com", + "identity": "CiRmZDE2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_user" + }, + "resource": { + "type": "user", + "id": "morty@the-citadel.com", + "userID": "CiRmZDE2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "morty@the-citadel.com", + "identity": "CiRmZDE2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_todos" + }, + "resource": { + "type": "todo", + "id": "todo-1" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "morty@the-citadel.com", + "identity": "CiRmZDE2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_create_todo" + }, + "resource": { + "type": "todo", + "id": "todo-1" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "morty@the-citadel.com", + "identity": "CiRmZDE2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_update_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "rick@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "morty@the-citadel.com", + "identity": "CiRmZDE2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_update_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "morty@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "morty@the-citadel.com", + "identity": "CiRmZDE2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_delete_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "rick@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "morty@the-citadel.com", + "identity": "CiRmZDE2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_delete_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "morty@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "summer@the-smiths.com", + "identity": "CiRmZDI2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_user" + }, + "resource": { + "type": "user", + "id": "beth@the-smiths.com", + "userID": "beth@the-smiths.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "summer@the-smiths.com", + "identity": "CiRmZDI2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_user" + }, + "resource": { + "type": "user", + "id": "summer@the-smiths.com", + "userID": "CiRmZDI2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "summer@the-smiths.com", + "identity": "CiRmZDI2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_todos" + }, + "resource": { + "type": "todo", + "id": "todo-1" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "summer@the-smiths.com", + "identity": "CiRmZDI2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_create_todo" + }, + "resource": { + "type": "todo", + "id": "todo-1" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "summer@the-smiths.com", + "identity": "CiRmZDI2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_update_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "rick@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "summer@the-smiths.com", + "identity": "CiRmZDI2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_update_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "summer@the-smiths.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "summer@the-smiths.com", + "identity": "CiRmZDI2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_delete_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "rick@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "summer@the-smiths.com", + "identity": "CiRmZDI2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_delete_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "summer@the-smiths.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "beth@the-smiths.com", + "identity": "CiRmZDM2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_user" + }, + "resource": { + "type": "user", + "id": "beth@the-smiths.com", + "userID": "beth@the-smiths.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "beth@the-smiths.com", + "identity": "CiRmZDM2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_user" + }, + "resource": { + "type": "user", + "id": "beth@the-smiths.com", + "userID": "CiRmZDM2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "beth@the-smiths.com", + "identity": "CiRmZDM2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_todos" + }, + "resource": { + "type": "todo", + "id": "todo-1" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "beth@the-smiths.com", + "identity": "CiRmZDM2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_create_todo" + }, + "resource": { + "type": "todo", + "id": "todo-1" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "beth@the-smiths.com", + "identity": "CiRmZDM2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_update_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "rick@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "beth@the-smiths.com", + "identity": "CiRmZDM2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_update_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "beth@the-smiths.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "beth@the-smiths.com", + "identity": "CiRmZDM2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_delete_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "rick@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "beth@the-smiths.com", + "identity": "CiRmZDM2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_delete_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "beth@the-smiths.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "jerry@the-smiths.com", + "identity": "CiRmZDQ2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_user" + }, + "resource": { + "type": "user", + "id": "beth@the-smiths.com", + "userID": "beth@the-smiths.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "jerry@the-smiths.com", + "identity": "CiRmZDQ2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_user" + }, + "resource": { + "type": "user", + "id": "jerry@the-smiths.com", + "userID": "CiRmZDQ2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "jerry@the-smiths.com", + "identity": "CiRmZDQ2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_todos" + }, + "resource": { + "type": "todo", + "id": "todo-1" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "jerry@the-smiths.com", + "identity": "CiRmZDQ2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_create_todo" + }, + "resource": { + "type": "todo", + "id": "todo-1" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "jerry@the-smiths.com", + "identity": "CiRmZDQ2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_update_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "rick@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "jerry@the-smiths.com", + "identity": "CiRmZDQ2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_update_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "jerry@the-smiths.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "jerry@the-smiths.com", + "identity": "CiRmZDQ2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_delete_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "rick@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "jerry@the-smiths.com", + "identity": "CiRmZDQ2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_delete_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "jerry@the-smiths.com" + } +} +``` + +
\ No newline at end of file diff --git a/interop/authzen-interop-website/docs/scenarios/todo-1.0-id/results/img/docsVersionDropdown.png b/interop/authzen-interop-website/docs/scenarios/todo-1.0-id/results/img/docsVersionDropdown.png new file mode 100644 index 0000000..97e4164 Binary files /dev/null and b/interop/authzen-interop-website/docs/scenarios/todo-1.0-id/results/img/docsVersionDropdown.png differ diff --git a/interop/authzen-interop-website/docs/scenarios/todo-1.0-id/results/img/localeDropdown.png b/interop/authzen-interop-website/docs/scenarios/todo-1.0-id/results/img/localeDropdown.png new file mode 100644 index 0000000..e257edc Binary files /dev/null and b/interop/authzen-interop-website/docs/scenarios/todo-1.0-id/results/img/localeDropdown.png differ diff --git a/interop/authzen-interop-website/docs/scenarios/todo-1.0-id/results/opa.md b/interop/authzen-interop-website/docs/scenarios/todo-1.0-id/results/opa.md new file mode 100644 index 0000000..a0f7d75 --- /dev/null +++ b/interop/authzen-interop-website/docs/scenarios/todo-1.0-id/results/opa.md @@ -0,0 +1,971 @@ +--- +sidebar_position: 8 +--- + +# Open Policy Agent + +Interop results for the [OPA](https://openpolicyagent.org/) implementation hosted at `https://authzen-opa-proxy.demo.aserto.com`. + +## Test results + +```bash +yarn test https://authzen-opa-proxy.demo.aserto.com markdown +yarn run v1.22.19 +$ node build/test/runner.js https://authzen-opa-proxy.demo.aserto.com markdown +``` + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
resultrequest
PASS + +```js +{ + "subject": { + "type": "user", + "id": "rick@the-citadel.com", + "identity": "CiRmZDA2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_user" + }, + "resource": { + "type": "user", + "id": "beth@the-smiths.com", + "userID": "beth@the-smiths.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "rick@the-citadel.com", + "identity": "CiRmZDA2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_user" + }, + "resource": { + "type": "user", + "id": "rick@the-citadel.com", + "userID": "CiRmZDA2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "rick@the-citadel.com", + "identity": "CiRmZDA2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_todos" + }, + "resource": { + "type": "todo", + "id": "todo-1" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "rick@the-citadel.com", + "identity": "CiRmZDA2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_create_todo" + }, + "resource": { + "type": "todo", + "id": "todo-1" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "rick@the-citadel.com", + "identity": "CiRmZDA2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_update_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "rick@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "rick@the-citadel.com", + "identity": "CiRmZDA2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_update_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "morty@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "rick@the-citadel.com", + "identity": "CiRmZDA2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_delete_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "rick@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "rick@the-citadel.com", + "identity": "CiRmZDA2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_delete_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "morty@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "morty@the-citadel.com", + "identity": "CiRmZDE2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_user" + }, + "resource": { + "type": "user", + "id": "beth@the-smiths.com", + "userID": "beth@the-smiths.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "morty@the-citadel.com", + "identity": "CiRmZDE2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_user" + }, + "resource": { + "type": "user", + "id": "morty@the-citadel.com", + "userID": "CiRmZDE2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "morty@the-citadel.com", + "identity": "CiRmZDE2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_todos" + }, + "resource": { + "type": "todo", + "id": "todo-1" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "morty@the-citadel.com", + "identity": "CiRmZDE2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_create_todo" + }, + "resource": { + "type": "todo", + "id": "todo-1" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "morty@the-citadel.com", + "identity": "CiRmZDE2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_update_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "rick@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "morty@the-citadel.com", + "identity": "CiRmZDE2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_update_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "morty@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "morty@the-citadel.com", + "identity": "CiRmZDE2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_delete_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "rick@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "morty@the-citadel.com", + "identity": "CiRmZDE2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_delete_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "morty@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "summer@the-smiths.com", + "identity": "CiRmZDI2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_user" + }, + "resource": { + "type": "user", + "id": "beth@the-smiths.com", + "userID": "beth@the-smiths.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "summer@the-smiths.com", + "identity": "CiRmZDI2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_user" + }, + "resource": { + "type": "user", + "id": "summer@the-smiths.com", + "userID": "CiRmZDI2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "summer@the-smiths.com", + "identity": "CiRmZDI2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_todos" + }, + "resource": { + "type": "todo", + "id": "todo-1" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "summer@the-smiths.com", + "identity": "CiRmZDI2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_create_todo" + }, + "resource": { + "type": "todo", + "id": "todo-1" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "summer@the-smiths.com", + "identity": "CiRmZDI2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_update_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "rick@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "summer@the-smiths.com", + "identity": "CiRmZDI2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_update_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "summer@the-smiths.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "summer@the-smiths.com", + "identity": "CiRmZDI2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_delete_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "rick@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "summer@the-smiths.com", + "identity": "CiRmZDI2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_delete_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "summer@the-smiths.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "beth@the-smiths.com", + "identity": "CiRmZDM2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_user" + }, + "resource": { + "type": "user", + "id": "beth@the-smiths.com", + "userID": "beth@the-smiths.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "beth@the-smiths.com", + "identity": "CiRmZDM2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_user" + }, + "resource": { + "type": "user", + "id": "beth@the-smiths.com", + "userID": "CiRmZDM2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "beth@the-smiths.com", + "identity": "CiRmZDM2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_todos" + }, + "resource": { + "type": "todo", + "id": "todo-1" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "beth@the-smiths.com", + "identity": "CiRmZDM2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_create_todo" + }, + "resource": { + "type": "todo", + "id": "todo-1" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "beth@the-smiths.com", + "identity": "CiRmZDM2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_update_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "rick@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "beth@the-smiths.com", + "identity": "CiRmZDM2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_update_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "beth@the-smiths.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "beth@the-smiths.com", + "identity": "CiRmZDM2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_delete_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "rick@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "beth@the-smiths.com", + "identity": "CiRmZDM2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_delete_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "beth@the-smiths.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "jerry@the-smiths.com", + "identity": "CiRmZDQ2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_user" + }, + "resource": { + "type": "user", + "id": "beth@the-smiths.com", + "userID": "beth@the-smiths.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "jerry@the-smiths.com", + "identity": "CiRmZDQ2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_user" + }, + "resource": { + "type": "user", + "id": "jerry@the-smiths.com", + "userID": "CiRmZDQ2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "jerry@the-smiths.com", + "identity": "CiRmZDQ2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_todos" + }, + "resource": { + "type": "todo", + "id": "todo-1" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "jerry@the-smiths.com", + "identity": "CiRmZDQ2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_create_todo" + }, + "resource": { + "type": "todo", + "id": "todo-1" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "jerry@the-smiths.com", + "identity": "CiRmZDQ2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_update_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "rick@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "jerry@the-smiths.com", + "identity": "CiRmZDQ2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_update_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "jerry@the-smiths.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "jerry@the-smiths.com", + "identity": "CiRmZDQ2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_delete_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "rick@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "jerry@the-smiths.com", + "identity": "CiRmZDQ2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_delete_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "jerry@the-smiths.com" + } +} +``` + +
\ No newline at end of file diff --git a/interop/authzen-interop-website/docs/scenarios/todo-1.0-id/results/topaz.md b/interop/authzen-interop-website/docs/scenarios/todo-1.0-id/results/topaz.md new file mode 100644 index 0000000..e1b4f69 --- /dev/null +++ b/interop/authzen-interop-website/docs/scenarios/todo-1.0-id/results/topaz.md @@ -0,0 +1,973 @@ +--- +sidebar_position: 6 +--- + +# Topaz + +Interop results for the [Topaz](https://www.topaz.sh/) implementation hosted at https://authzen-topaz-proxy.demo.aserto.com. Note that this implementation deploys a Topaz sidecar in the same pod as the proxy. + +For more information, please refer to the [code](https://github.com/aserto-dev/authzen-topaz-proxy) and [playground](https://authzen-topaz-proxy.demo.aserto.com), demonstrating the scenario. + +## Test results + +```bash +yarn test https://authzen-topaz-proxy.demo.aserto.com markdown +yarn run v1.22.19 +$ node build/test/runner.js https://authzen-topaz-proxy.demo.aserto.com markdown +``` + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
resultrequest
PASS + +```js +{ + "subject": { + "type": "user", + "id": "rick@the-citadel.com", + "identity": "CiRmZDA2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_user" + }, + "resource": { + "type": "user", + "id": "beth@the-smiths.com", + "userID": "beth@the-smiths.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "rick@the-citadel.com", + "identity": "CiRmZDA2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_user" + }, + "resource": { + "type": "user", + "id": "rick@the-citadel.com", + "userID": "CiRmZDA2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "rick@the-citadel.com", + "identity": "CiRmZDA2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_todos" + }, + "resource": { + "type": "todo", + "id": "todo-1" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "rick@the-citadel.com", + "identity": "CiRmZDA2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_create_todo" + }, + "resource": { + "type": "todo", + "id": "todo-1" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "rick@the-citadel.com", + "identity": "CiRmZDA2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_update_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "rick@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "rick@the-citadel.com", + "identity": "CiRmZDA2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_update_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "morty@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "rick@the-citadel.com", + "identity": "CiRmZDA2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_delete_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "rick@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "rick@the-citadel.com", + "identity": "CiRmZDA2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_delete_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "morty@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "morty@the-citadel.com", + "identity": "CiRmZDE2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_user" + }, + "resource": { + "type": "user", + "id": "beth@the-smiths.com", + "userID": "beth@the-smiths.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "morty@the-citadel.com", + "identity": "CiRmZDE2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_user" + }, + "resource": { + "type": "user", + "id": "morty@the-citadel.com", + "userID": "CiRmZDE2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "morty@the-citadel.com", + "identity": "CiRmZDE2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_todos" + }, + "resource": { + "type": "todo", + "id": "todo-1" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "morty@the-citadel.com", + "identity": "CiRmZDE2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_create_todo" + }, + "resource": { + "type": "todo", + "id": "todo-1" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "morty@the-citadel.com", + "identity": "CiRmZDE2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_update_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "rick@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "morty@the-citadel.com", + "identity": "CiRmZDE2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_update_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "morty@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "morty@the-citadel.com", + "identity": "CiRmZDE2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_delete_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "rick@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "morty@the-citadel.com", + "identity": "CiRmZDE2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_delete_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "morty@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "summer@the-smiths.com", + "identity": "CiRmZDI2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_user" + }, + "resource": { + "type": "user", + "id": "beth@the-smiths.com", + "userID": "beth@the-smiths.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "summer@the-smiths.com", + "identity": "CiRmZDI2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_user" + }, + "resource": { + "type": "user", + "id": "summer@the-smiths.com", + "userID": "CiRmZDI2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "summer@the-smiths.com", + "identity": "CiRmZDI2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_todos" + }, + "resource": { + "type": "todo", + "id": "todo-1" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "summer@the-smiths.com", + "identity": "CiRmZDI2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_create_todo" + }, + "resource": { + "type": "todo", + "id": "todo-1" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "summer@the-smiths.com", + "identity": "CiRmZDI2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_update_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "rick@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "summer@the-smiths.com", + "identity": "CiRmZDI2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_update_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "summer@the-smiths.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "summer@the-smiths.com", + "identity": "CiRmZDI2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_delete_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "rick@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "summer@the-smiths.com", + "identity": "CiRmZDI2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_delete_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "summer@the-smiths.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "beth@the-smiths.com", + "identity": "CiRmZDM2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_user" + }, + "resource": { + "type": "user", + "id": "beth@the-smiths.com", + "userID": "beth@the-smiths.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "beth@the-smiths.com", + "identity": "CiRmZDM2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_user" + }, + "resource": { + "type": "user", + "id": "beth@the-smiths.com", + "userID": "CiRmZDM2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "beth@the-smiths.com", + "identity": "CiRmZDM2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_todos" + }, + "resource": { + "type": "todo", + "id": "todo-1" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "beth@the-smiths.com", + "identity": "CiRmZDM2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_create_todo" + }, + "resource": { + "type": "todo", + "id": "todo-1" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "beth@the-smiths.com", + "identity": "CiRmZDM2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_update_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "rick@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "beth@the-smiths.com", + "identity": "CiRmZDM2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_update_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "beth@the-smiths.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "beth@the-smiths.com", + "identity": "CiRmZDM2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_delete_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "rick@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "beth@the-smiths.com", + "identity": "CiRmZDM2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_delete_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "beth@the-smiths.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "jerry@the-smiths.com", + "identity": "CiRmZDQ2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_user" + }, + "resource": { + "type": "user", + "id": "beth@the-smiths.com", + "userID": "beth@the-smiths.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "jerry@the-smiths.com", + "identity": "CiRmZDQ2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_user" + }, + "resource": { + "type": "user", + "id": "jerry@the-smiths.com", + "userID": "CiRmZDQ2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "jerry@the-smiths.com", + "identity": "CiRmZDQ2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_read_todos" + }, + "resource": { + "type": "todo", + "id": "todo-1" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "jerry@the-smiths.com", + "identity": "CiRmZDQ2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_create_todo" + }, + "resource": { + "type": "todo", + "id": "todo-1" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "jerry@the-smiths.com", + "identity": "CiRmZDQ2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_update_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "rick@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "jerry@the-smiths.com", + "identity": "CiRmZDQ2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_update_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "jerry@the-smiths.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "jerry@the-smiths.com", + "identity": "CiRmZDQ2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_delete_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "rick@the-citadel.com" + } +} +``` + +
PASS + +```js +{ + "subject": { + "type": "user", + "id": "jerry@the-smiths.com", + "identity": "CiRmZDQ2MTRkMy1jMzlhLTQ3ODEtYjdiZC04Yjk2ZjVhNTEwMGQSBWxvY2Fs" + }, + "action": { + "name": "can_delete_todo" + }, + "resource": { + "type": "todo", + "id": "7240d0db-8ff0-41ec-98b2-34a096273b9f", + "ownerID": "jerry@the-smiths.com" + } +} +``` + +
\ No newline at end of file diff --git a/interop/authzen-interop-website/docs/scenarios/todo-1.1/index.md b/interop/authzen-interop-website/docs/scenarios/todo-1.1/index.md index 2af746e..d549636 100644 --- a/interop/authzen-interop-website/docs/scenarios/todo-1.1/index.md +++ b/interop/authzen-interop-website/docs/scenarios/todo-1.1/index.md @@ -1,11 +1,13 @@ --- -sidebar_position: 2 +sidebar_position: 3 --- # Todo Application This document lists the request and response payloads for each of the API requests in the Todo interop scenario. +> Note: These payloads and corresponding interop results are for the [AuthZEN 1.1 Preview 01](https://openid.github.io/authzen/authorization-api-1_1_01) version of the spec. + :::tip This is a copy of the payload document defined by the AuthZEN WG. The definitive document can be found [here](https://hackmd.io/gNZBRoTfRgWh_PNM0y2wDA?view). ::: @@ -111,11 +113,47 @@ The PIP can, of course, express this in any way they desire. The policy for each ## Requests and payloads +### `GET /users/{userID}` + +Get information (e.g. email, picture) associated with a user. This is used by the backend to render the picture of the user that owns each todo. + +For simplicity, the policy always returns `true`. + +#### Request payload + +```js +{ + "subject": { + "type": "user", + "id": "" + }, + "action": { + "name": "can_read_user" + }, + "resource": { + "type": "user", + "id": "" + }, + "context": { + } +} +``` + +#### Response payload + +For every subject and resource combination: + +```js +{ + "decision": true +} +``` + ### `GET /todos` Get the list of todos. -> Note: For the 1.0 Implementer's Draft version of the interop, this call utilizes only the `evaluation` API. The 1.1-preview version of the interop also utilizes the `evaluations` API. See more below. +> Note: For the 1.0 Implementer's Draft version of the interop, this call utilizes only the `evaluation` API. The 1.1 version of the interop also utilizes the `evaluations` API. See more below. #### Evaluation API payload @@ -123,7 +161,7 @@ For simplicity, the policy always returns `true` for every user. ##### Evaluation API Request payload -```json= +```js { "subject": { "type": "user", @@ -141,22 +179,17 @@ For simplicity, the policy always returns `true` for every user. } ``` -> Notes: -> -> 1. `subject.identity` has been removed. -> 2. `resource.type` continues to be `todo`, and `resource.id` is specified as a fixed / stable identifier. - ##### Evaluation API Response payload For every subject and resource combination: -```json= +```js { "decision": true } ``` -#### AuthZEN 1.1-preview semantics +#### AuthZEN 1.1 semantics AuthZEN 1.1 provides an `evaluations` API which enables a PEP to "boxcar" a number of authorization requests in a single round-trip. @@ -166,13 +199,13 @@ The Todo Application uses this facility to determine which Todos a user is able > Note: this payload is intended for the `evaluations` (note plural) endpoint of a 1.1-compliant PDP. -```http= +```http POST /access/v1/evaluations HTTP/1.1 Host: mypdp.com [Authorization: Bearer ] ``` -```json= +```js { "subject": { "type": "user", @@ -212,7 +245,7 @@ Host: mypdp.com The `evaluations` array contains the result of each evaluation request sent in the request payload. For example, for the user Morty, using the following request payload: -```json= +```js { "subject": { "type": "user", @@ -250,7 +283,7 @@ The `evaluations` array contains the result of each evaluation request sent in t The response payload will be: -```json= +```js { "evaluations": [ { @@ -314,7 +347,7 @@ Edit (complete) a todo. The policy allows the operation if the subject's `roles` attribute contains the `evil_genius` role, OR if the subject's `roles` contains the `editor` role AND the subject is the owner of the todo. -The `resource` contains an attribute called `ownerID` which contains the `id` of the owner (which is defined in the "Attributes" section above, and is the email address of the owner). +The `resource.properties` contains an attribute called `ownerID` which contains the `id` of the owner (which is defined in the "Attributes" section above, and is the email address of the owner). #### Request payload @@ -336,6 +369,10 @@ The `resource` contains an attribute called `ownerID` which contains the `id` of } ``` +> Notes: +> +> 1. `resource.id` is a UUID representing the Todo, but since the PDPs are not assumed to be stateful, `resource.properties.ownerID` is passed in as a way to designate a Todo's owner. + #### Response payload Only users with a `roles` attribute that contains `evil_genius` (Rick), OR the owner of the todo, return a `true` decision. @@ -380,11 +417,12 @@ Delete a todo. The policy allows the operation if the subject's `roles` attribute contains the `admin` role, OR if the subject's `roles` contains the `editor` role AND the subject is the owner of the todo. -The `resource` contains an attribute called `ownerID` which contains the `id` of the owner (which is defined in the "Attributes" section above, and is the email address of the owner). +The `resource.properties` contains an attribute called `ownerID` which contains the `id` of the owner (which is defined in the "Attributes" section above, and is the email address of the owner). #### Request payload -```json +```js +{ "subject": { "type": "user", "id": "" @@ -406,9 +444,7 @@ The `resource` contains an attribute called `ownerID` which contains the `id` of > Notes: > -> 1. `subject.identity` has been removed. -> 2. `resource.id` is a UUID representing the Todo, but since the PDPs are not assumed to be stateful, `ownerID` continues to be passed in as a way to designate a Todo's owner. -> 3. `resource.ownerID` has been moved to `resource.properties.ownerID`, to make it compliant with AuthZEN 1.0 Implementers Draft. +> 1. `resource.id` is a UUID representing the Todo, but since the PDPs are not assumed to be stateful, `resource.properties.ownerID` is passed in as a way to designate a Todo's owner. #### Response payload @@ -416,7 +452,7 @@ Only users with a `roles` attribute that contains `admin` (Rick), OR the owner o For the user Morty, the following request will return a `true` decision: -```json +```js { "subject": { "type": "user", @@ -436,7 +472,7 @@ For the user Morty, the following request will return a `true` decision: } ``` -```json +```js { "decision": true } @@ -444,7 +480,7 @@ For the user Morty, the following request will return a `true` decision: For a different value of `ownerID`, the decision will be `false`: -```json +```js { "decision": false } diff --git a/interop/authzen-interop-website/docs/scenarios/todo-1.1/results/topaz.md b/interop/authzen-interop-website/docs/scenarios/todo-1.1/results/topaz.md index 3c7122e..6df3dbe 100644 --- a/interop/authzen-interop-website/docs/scenarios/todo-1.1/results/topaz.md +++ b/interop/authzen-interop-website/docs/scenarios/todo-1.1/results/topaz.md @@ -6,6 +6,8 @@ sidebar_position: 4 Interop results for the [Topaz](https://www.topaz.sh/) implementation hosted at https://authzen-topaz-proxy.demo.aserto.com. Note that this implementation deploys a Topaz sidecar in the same pod as the proxy. +For more information, please refer to the [code](https://github.com/aserto-dev/authzen-topaz-proxy) and [playground](https://authzen-topaz-proxy.demo.aserto.com), demonstrating the scenario. + ## Test results ```bash diff --git a/interop/authzen-interop-website/docs/scenarios/todo/_category_.json b/interop/authzen-interop-website/docs/scenarios/todo/_category_.json index 6460daa..d12aa3b 100644 --- a/interop/authzen-interop-website/docs/scenarios/todo/_category_.json +++ b/interop/authzen-interop-website/docs/scenarios/todo/_category_.json @@ -1,5 +1,5 @@ { - "label": "Todo (1.0 Spec)", + "label": "Todo (1.0 Preview)", "position": 2, "link": { "type": "generated-index", diff --git a/interop/authzen-interop-website/docs/scenarios/todo/index.md b/interop/authzen-interop-website/docs/scenarios/todo/index.md index 045b008..c85af64 100644 --- a/interop/authzen-interop-website/docs/scenarios/todo/index.md +++ b/interop/authzen-interop-website/docs/scenarios/todo/index.md @@ -6,6 +6,9 @@ sidebar_position: 1 This document lists the request and response payloads for each of the API requests in the Todo interop scenario. +:::danger These payloads and corresponding interop results are for the [AuthZEN 1.0 Preview 00](https://openid.github.io/authzen/authorization-api-1_0_00) version of the spec. These results are superseded by the [Implementers Draft](../todo-1.0-id/index.md) results. Once all of the implementations in this section switch over to the Implementers Draft, this section will be deleted. +::: + :::tip This is a copy of the payload document defined by the AuthZEN WG. The definitive document can be found [here](https://hackmd.io/gNZBRoTfRgWh_PNM0y2wDA?view). ::: diff --git a/interop/authzen-interop-website/docs/scenarios/todo/results/aserto.md b/interop/authzen-interop-website/docs/scenarios/todo/results/aserto.md index 5fe1c53..279abda 100644 --- a/interop/authzen-interop-website/docs/scenarios/todo/results/aserto.md +++ b/interop/authzen-interop-website/docs/scenarios/todo/results/aserto.md @@ -4,16 +4,16 @@ sidebar_position: 1 # Aserto -Interop results for the [Aserto](https://www.aserto.com/) implementation hosted at https://authzen-proxy.demo.aserto.com. +Interop results for the [Aserto](https://www.aserto.com/) implementation hosted at https://authzen-proxy-preview.demo.aserto.com. -For more information, please refer to the [code](https://github.com/aserto-dev/authzen-topaz-proxy) and [playground](https://authzen-proxy.demo.aserto.com), demonstrating the scenario. +For more information, please refer to the [code](https://github.com/aserto-dev/authzen-topaz-proxy) and [playground](https://authzen-proxy-preview.demo.aserto.com), demonstrating the scenario. ## Test results ```bash -yarn test https://authzen-proxy.demo.aserto.com markdown +yarn test https://authzen-proxy-preview.demo.aserto.com markdown yarn run v1.22.19 -$ node build/test/runner.js https://authzen-proxy.demo.aserto.com markdown +$ node build/test/runner.js https://authzen-proxy-preview.demo.aserto.com markdown ``` diff --git a/interop/authzen-interop-website/docs/scenarios/todo/results/opa.md b/interop/authzen-interop-website/docs/scenarios/todo/results/opa.md index a0f7d75..865c541 100644 --- a/interop/authzen-interop-website/docs/scenarios/todo/results/opa.md +++ b/interop/authzen-interop-website/docs/scenarios/todo/results/opa.md @@ -4,14 +4,14 @@ sidebar_position: 8 # Open Policy Agent -Interop results for the [OPA](https://openpolicyagent.org/) implementation hosted at `https://authzen-opa-proxy.demo.aserto.com`. +Interop results for the [OPA](https://openpolicyagent.org/) implementation hosted at `https://authzen-opa-proxy-preview.demo.aserto.com`. ## Test results ```bash -yarn test https://authzen-opa-proxy.demo.aserto.com markdown +yarn test https://authzen-opa-proxy-preview.demo.aserto.com markdown yarn run v1.22.19 -$ node build/test/runner.js https://authzen-opa-proxy.demo.aserto.com markdown +$ node build/test/runner.js https://authzen-opa-proxy-preview.demo.aserto.com markdown ```
diff --git a/interop/authzen-interop-website/docs/scenarios/todo/results/topaz.md b/interop/authzen-interop-website/docs/scenarios/todo/results/topaz.md index fa801e0..6c08d83 100644 --- a/interop/authzen-interop-website/docs/scenarios/todo/results/topaz.md +++ b/interop/authzen-interop-website/docs/scenarios/todo/results/topaz.md @@ -4,14 +4,16 @@ sidebar_position: 6 # Topaz -Interop results for the [Topaz](https://www.topaz.sh/) implementation hosted at https://authzen-topaz-proxy.demo.aserto.com. Note that this implementation deploys a Topaz sidecar in the same pod as the proxy. +Interop results for the [Topaz](https://www.topaz.sh/) implementation hosted at https://authzen-topaz-proxy-preview.demo.aserto.com. Note that this implementation deploys a Topaz sidecar in the same pod as the proxy. + +For more information, please refer to the [code](https://github.com/aserto-dev/authzen-topaz-proxy) and [playground](https://authzen-topaz-proxy-preview.demo.aserto.com), demonstrating the scenario. ## Test results ```bash -yarn test https://authzen-topaz-proxy.demo.aserto.com markdown +yarn test https://authzen-topaz-proxy-preview.demo.aserto.com markdown yarn run v1.22.19 -$ node build/test/runner.js https://authzen-topaz-proxy.demo.aserto.com markdown +$ node build/test/runner.js https://authzen-topaz-proxy-preview.demo.aserto.com markdown ```