rond-authz / rond

A lightweight container for distributed security policy evaluation
https://rond-authz.io
Apache License 2.0
163 stars 6 forks source link

Provide more data from service configuration #343

Open fredmaggiowski opened 4 months ago

fredmaggiowski commented 4 months ago

Is your feature request related to a problem? Please describe

I'd like to be able to provide more additional input data to my policies.

This feature may be used for several use cases, such as:

and more.

Describe the solution you'd like

I'd like to be able to run my policies and use the data keyword to access my contents.

e.g. Using PEM encoded certificates

allow_after_token_verified {
    mytoken := input.request.headers["My-Token"]
    pem_certificate := data.MY_PEM_CERTIFICATE
    io.jwt.verify_es256(mytoken, pem_certificate)
}

This may work with data supplied both by configuration file and environment variables.