Skip to content
KortexyaKortexyaReasoning Layer SDK

Interface: AuthzCheckRequest

@kortexya/reasoninglayer

@kortexya/reasoninglayer / AuthzCheckRequest

Interface: AuthzCheckRequest

Section titled “Interface: AuthzCheckRequest”

Defined in: src/types/authz.ts:264

Body of POST /api/v1/authz/check — does a subject hold a permission on a resource?

Example

Section titled “Example”
const request: AuthzCheckRequest = {
  subject: 'user:alice',
  permission: 'read',
  resource: 'doc:1',
};

Properties

Section titled “Properties”

decisionTime?

Section titled “decisionTime?”

optional decisionTime?: string

Defined in: src/types/authz.ts:279

The instant the decision is made at (RFC 3339). Absent: the instant the engine receives the request. Only the gateway provisioning identity may set it; a time-bounded grant is judged at this instant.

permission

Section titled “permission”

permission: string

Defined in: src/types/authz.ts:271

The permission to check.

resource

Section titled “resource”

resource: string

Defined in: src/types/authz.ts:273

The resource the permission applies to.

subject

Section titled “subject”

subject: string

Defined in: src/types/authz.ts:269

The subject to probe. An ordinary caller may probe only its OWN subject; the gateway provisioning identity may probe anyone.