feat: As a user, I want to include the request body in the opa-input, so that I can reason about its contents

apache / apisix

The Cloud-Native API Gateway

https://apisix.apache.org/blog/

Apache License 2.0

14.45k stars 2.51k forks source link

feat: As a user, I want to include the request body in the opa-input, so that I can reason about its contents #11387

Open wistefan opened 3 months ago

wistefan commented 3 months ago

Description

The opa-plugin already includes various information about the http-request(path, query, headers etc.) in the opa-input. However, its not possible to also include the request body as part of the input. This would extend OPAs capabilities in terms of decision making, f.e. to check if only allowed fields of a certain entity are manipulated within a PUT request.

LuciaCabanillasRodriguez commented 1 month ago

Is there any news on this issue?

wistefan commented 1 week ago

@LuciaCabanillasRodriguez I created a pr for the feature: #11629