Switch to rego as policy decision engine

[aeneasr]

This is an experimental PR which aims to deprecate the ORY Ladon SDK in favor of Rego, the language behind the Open Policy Agent.

This PR is the an attempt at improving the ORY Keto functionality and making it possible to add more access control mechanisms such as ACL, RBAC, ABAC, ... to the mix without writing a lot of code.

This PR will break some backwards compatibility regarding API design, but it will keep backwards compatibility with ORY Ladon's Access Control Policies!

• Implement access control policies using rego
• Implement adapters for rego
  • Storage
    • In-Memory
    • SQL
  • Reporters
• Implement API handlers for CRUD'ing data (e.g. policies, roles) and making requests like the warden

I think it makes sense to deprecate the authentication handlers as well. They have a lot of configuration overhead and might be added at a later stage as part of the rego logic. Please complain if you rely on them and need them in future releases.

This is related to #47

[MOZGIII]

+1,909 −29,558 👍