This repository shows how to integrate a service written in Go with OPA to perform API authorization.
Build the example by running go build ./cmd/example-api-authz-go/...
This example requires an external HTTP server that serves OPA Bundles. If you don't provide an OPA configuration that enables bundle downloading, the server will fail-closed.
Run the example with an OPA Configuration File:
./example-api-authz-go -config config.yaml
The example implementation is hardcoded to assume a policy decision will be generated at path
system.main
. You must define a policy decision at that
path. If your policies use another package, you can include an
entrypoint policy.
Entrypoint:
package system
main = data.example.allow
Your policy:
package example
default allow = false
allow {
input.method == "GET"
input.user == "bob"
}