Skip to content

OPA authorization policies #86

@Miracle656

Description

@Miracle656

Background

Fine-grained API access (per-account, per-token) needs a policy engine.

What to build

OPA sidecar evaluating Rego policies against requests; SDK config to enable.

Key files

  • policies/ (new)
  • src/middleware/opa.ts (new)

Acceptance criteria

  • Policies evaluated per request
  • Deny logs include rule name

Drips Wave · Complexity: Advanced · 200 points


Lens (Miracle656/Lens) — 40 issues

Tests (L001–L008)

Metadata

Metadata

Assignees

Labels

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions