Authorization Service¶

The authorization service request messages used by external authorization network filter and HTTP filter.

service.auth.v2alpha.CheckRequest¶

{
  "attributes": "{...}"
}

HTTP attributes for a denied response.

{
  "status": "{...}",
  "headers": [],
  "body": "..."
}

status: (type.HttpStatus, REQUIRED) This field allows the authorization service to send a HTTP response status code to the downstream client other than 403 (Forbidden).

headers: (core.HeaderValueOption) This field allows the authorization service to send HTTP response headers to the the downstream client.

body: (string) This field allows the authorization service to send a response body data to the the downstream client.

HTTP attributes for an ok response.

{
  "headers": []
}

headers: (core.HeaderValueOption) HTTP entity headers in addition to the original request headers. This allows the authorization service to append, to add or to override headers from the original request before dispatching it to the upstream. By setting append field to true in the HeaderValueOption, the filter will append the correspondent header value to the matched request header. Note that by Leaving append as false, the filter will either add a new header, or override an existing one if there is a match.

Intended for gRPC and Network Authorization servers only.

{
  "status": "{...}",
  "denied_response": "{...}",
  "ok_response": "{...}"
}

status: (Status) Status OK allows the request. Any other status indicates the request should be denied.

denied_response

(service.auth.v2alpha.DeniedHttpResponse) Supplies http attributes for a denied response.

ok_response

(service.auth.v2alpha.OkHttpResponse) Supplies http attributes for an ok response.