Struct EvaluationRequest

pub struct EvaluationRequest {
    pub subject: EntityRef,
    pub action: EntityRef,
    pub resource: EntityRef,
    pub context: Value,
    pub entities: Vec<Value>,
}

OpenID AuthZEN EvaluationRequest (subject/action/resource/context).

Per the AuthZEN draft, requests MAY include an entities array of fully-formed Cedar entity JSON objects ({uid: {type, id}, attrs: {...}, parents: [...]}). When present they are unioned with the always-present subject/action/resource entities and passed to the Cedar evaluator.

Without entities, every real-world policy that references any entity attribute or hierarchy (the typical case) returns Deny because Cedar resolves principal in Group::"admins" against an empty store. This is the single most common AuthZEN integration bug.

Fields

subject: EntityRef

action: EntityRef

resource: EntityRef

context: Value

entities: Vec<Value>

Optional list of entity JSON objects to make available to the Cedar evaluator. See module docs.

Trait Implementations

impl Debug for EvaluationRequest

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for EvaluationRequest

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for EvaluationRequest

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.