Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Enable policy opts via http-api #445

Merged
merged 2 commits into from
Apr 6, 2023
Merged

Enable policy opts via http-api #445

merged 2 commits into from
Apr 6, 2023

Commits on Apr 6, 2023

  1. specify context-type of policy retrieval query 

    When using policy via http-api, default context-type will be `:string`, and expanding/parsing this query will fail if we don't specify the context-type. This ensures the policy query will succeed regardless of the default context-type.
    @mpoffald
    mpoffald committed Apr 6, 2023
    Configuration menu
    Copy the full SHA
    56e770d View commit details
    Browse the repository at this point in the history

  2. Fail closed in case of error compiling policies 

    These fns return lists of restrictions. Before this change, if there was an error during policy compilation, we would fail open (no list of restrictions -> unrestricted access). We could still do better wrt error handling here, but at least this way we will not silently fail to enforce any policy in case of an error.
    @mpoffald
    mpoffald committed Apr 6, 2023
    Configuration menu
    Copy the full SHA
    f394d78 View commit details
    Browse the repository at this point in the history