https://speedle.io/tags/core/ Recent content in Core on Speedle Hugo -- gohugo.io en-us Fri, 18 Jan 2019 21:19:44 +0800 https://speedle.io/docs/api/ Mon, 01 Jan 0001 00:00:00 +0000 https://speedle.io/docs/api/ REST APIs Policy Management Service API Authorization Decision Service API Token Assertion API GRPC APIs Policy Management Service API Authorization Decision Service API Golang APIs Policy Management Service API Authorization Decision Service API Policy Management Authorization Decision Token Assertion https://speedle.io/docs/decisions/ Mon, 01 Jan 0001 00:00:00 +0000 https://speedle.io/docs/decisions/ What is an authorization decision? An authorization decision determines whether a subject performing an action on a resource is allowed. An authorization decision is the result of real-time evaluation based on policies and attributes. Ways to get authorization decisions Authorization decisions can be performed by the Authorization Decision Service or an by an embedded evaluator: Authorization Decision Service (ADS) REST API Grpc API Embedded Evaluator Golang API APIs and Samples The ADS decision APIs make authorization decisions based on policies that describe the actions, permissions, and roles granted to a subject. https://speedle.io/docs/api/decision_api/ Mon, 01 Jan 0001 00:00:00 +0000 https://speedle.io/docs/api/decision_api/ (function() { var url = "\/swagger\/policy-check.yaml"; const ui = SwaggerUIBundle({ url: url, dom_id: '#swagger-ui', deepLinking: true, presets: [ SwaggerUIBundle.presets.apis ], plugins: [ SwaggerUIBundle.plugins.DownloadUrl ], validatorUrl: null, layout: "BaseLayout" }) window.ui = ui })(); https://speedle.io/docs/pms/discover/ Mon, 01 Jan 0001 00:00:00 +0000 https://speedle.io/docs/pms/discover/ What can discover mode do? * Help you discover existing authorization requests The is-allowed API endpoint and the discover API endpoint use the same request and response format. When you replace is-allowed with discover in the URL of the API, each authorization request that is returned shows WHO carries out WHAT action on WHICH resource. Discover mode does not evaluate the authorization decision; it simply records the authorization decision requests, along with the actions and the resources protected, and returns “is-allowed=true”. https://speedle.io/docs/pms/policy-mgmt/ Mon, 01 Jan 0001 00:00:00 +0000 https://speedle.io/docs/pms/policy-mgmt/ What is a Speedle policy? A Speedle policy is a set of criteria that specify whether a user is granted access to a particular protected resource or assignment to a particular role. You manage Speedle policies using the Speedle Policy Management Service(PMS). Understanding the Speedle Policy Module Note: The Speedle syntax used in this document is defined in SPDL - Security Policy Definition Language. Policy store The policy store maintains all policy artifacts and can be persisted to an etcd store or a JSON file. https://speedle.io/docs/api/management_api/ Mon, 01 Jan 0001 00:00:00 +0000 https://speedle.io/docs/api/management_api/ (function() { var url = "\/swagger\/policy-manage.yaml"; const ui = SwaggerUIBundle({ url: url, dom_id: '#swagger-ui', deepLinking: true, presets: [ SwaggerUIBundle.presets.apis ], plugins: [ SwaggerUIBundle.plugins.DownloadUrl ], validatorUrl: null, layout: "BaseLayout" }) window.ui = ui })(); https://speedle.io/docs/spdl/ Mon, 01 Jan 0001 00:00:00 +0000 https://speedle.io/docs/spdl/ Syntax Keywords The reserved keywords in SPDL are as follows. You cannot use any of these keywords as user name, group name, action, resource, attribute name, and so on. role user group entity grant deny if in on from The keywords are all case-insensitive, which means that you cannot use one of “role”, “ROLE”, “Role”, “rOLe”, etc as user name, group name, action, resource, attribute name, and so on. https://speedle.io/docs/pms/ Fri, 18 Jan 2019 21:19:44 +0800 https://speedle.io/docs/pms/ Policy Management Global Policy Policy Discovery Policy Diagnosis https://speedle.io/docs/api/asserter_api/ Mon, 01 Jan 0001 00:00:00 +0000 https://speedle.io/docs/api/asserter_api/ (function() { var url = "\/swagger\/asserter.yaml"; const ui = SwaggerUIBundle({ url: url, dom_id: '#swagger-ui', deepLinking: true, presets: [ SwaggerUIBundle.presets.apis ], plugins: [ SwaggerUIBundle.plugins.DownloadUrl ], validatorUrl: null, layout: "BaseLayout" }) window.ui = ui })();