https://engine.speedle.io/tags/core/ Recent content in Core on Speedle Hugo -- gohugo.io en-us Fri, 18 Jan 2019 21:19:44 +0800 https://engine.speedle.io/docs/api/ Mon, 01 Jan 0001 00:00:00 +0000 https://engine.speedle.io/docs/api/ Client libraries for Java, Python, Go, .NET, Rust and Node.js/TypeScript are in SDKs. REST APIs These are reference contracts for your configured PMS/ADS or asserter endpoint. speedle.io serves documentation and the browser Playground; it is not a hosted PMS/ADS service. Supply JSON with Content-Type: application/json, and configure TLS/mTLS and caller access controls. Policy management API Authorization decision API Token assertion webhook Policy and role-policy IDs are strings. PMS responses are flat objects; authorization permissions use permissions (plural). https://engine.speedle.io/docs/decisions/ Mon, 01 Jan 0001 00:00:00 +0000 https://engine.speedle.io/docs/decisions/ What is an authorization decision? Speedle evaluates a subject, action and resource within a service. The application must enforce the result. Treat an evaluation error or timeout separately from a normal Deny and fail closed. REST, gRPC and embedded Go APIs have different wire representations; use their respective contracts. Before running the examples Build ./bin/spctl, ./bin/speedle-pms and ./bin/speedle-ads using the quick start. Use Go 1.26.10 or Go 1.27.3 (or a newer patch on the same release branch), Bash, curl and Python 3. https://engine.speedle.io/docs/api/decision_api/ Mon, 01 Jan 0001 00:00:00 +0000 https://engine.speedle.io/docs/api/decision_api/ Reference for your configured ADS. Request attributes are typed arrays; diagnostic attributes are objects. Security and endpoint configuration. This is a contract reference, not a backend hosted by speedle.io. (function() { var url = "\/swagger\/policy-check.yaml"; const ui = SwaggerUIBundle({ url: url, dom_id: '#swagger-ui', deepLinking: true, presets: [ SwaggerUIBundle.presets.apis ], plugins: [ SwaggerUIBundle.plugins.DownloadUrl ], validatorUrl: null, layout: " https://engine.speedle.io/docs/pms/discover/ Mon, 01 Jan 0001 00:00:00 +0000 https://engine.speedle.io/docs/pms/discover/ What discovery does Discovery records requests and returns allowed=true with reason 5 for a successful recording operation. It does not prove that an existing policy authorized the operation. Use it only in an isolated test environment, review generated grants, and restore normal is-allowed enforcement afterwards. Assertion or storage errors must still be handled; never treat an error as an authorization grant. Start a reproducible local example Build the binaries using Quick Start, then run all terminals from the checkout root. https://engine.speedle.io/docs/pms/policy-mgmt/ Mon, 01 Jan 0001 00:00:00 +0000 https://engine.speedle.io/docs/pms/policy-mgmt/ What is a Speedle policy? The Policy Management Service (PMS) manages services, authorization policies, role policies and custom functions. A policy store persists those objects using a registered storage backend. Services and authorization policies A service scopes its policies. An authorization policy grants or denies a principal permission to perform an action on a resource, optionally subject to a condition. Except for global role policies, policies do not automatically apply in another service. https://engine.speedle.io/docs/api/management_api/ Mon, 01 Jan 0001 00:00:00 +0000 https://engine.speedle.io/docs/api/management_api/ Reference for your configured PMS. Requests and responses are JSON; policy IDs are strings and responses are flat objects. Security and endpoint configuration. This is a contract reference, not a backend hosted by speedle.io. (function() { var url = "\/swagger\/policy-manage.yaml"; const ui = SwaggerUIBundle({ url: url, dom_id: '#swagger-ui', deepLinking: true, presets: [ SwaggerUIBundle.presets.apis ], plugins: [ SwaggerUIBundle. https://engine.speedle.io/docs/spdl/ Mon, 01 Jan 0001 00:00:00 +0000 https://engine.speedle.io/docs/spdl/ Syntax Keywords grant, deny, user, group, entity, role, from, on, if and in have special meanings in their syntax positions. Statement keywords are case-insensitive. In conditions, use in or IN; function names are case-sensitive. Principal, action and resource names are also case-sensitive. The current parser accepts keyword-like names in some name positions, so a blanket prohibition is not a validation rule. Prefer unambiguous names for review and client interoperability. https://engine.speedle.io/docs/overview/ Mon, 01 Jan 0001 00:00:00 +0000 https://engine.speedle.io/docs/overview/ Speedle is an open-source authorization engine. Applications send it a question such as “may this user perform this action on this resource?”, and Speedle answers allow or deny according to centrally managed policies. This page connects common authorization terms to the Speedle components that implement them, and links to the guides that cover each one. The examples below use a service named library. Each policy was created through the Policy Management Service REST API and each decision was returned by the Authorization Decision Service REST API. https://engine.speedle.io/docs/pms/ Fri, 18 Jan 2019 21:19:44 +0800 https://engine.speedle.io/docs/pms/ Policy Management Global Policy Policy Discovery Policy Diagnosis https://engine.speedle.io/docs/api/asserter_api/ Mon, 01 Jan 0001 00:00:00 +0000 https://engine.speedle.io/docs/api/asserter_api/ Webhook reference. errCode is an integer and attributes is an object. Configure the actual endpoint in the ADS asserter configuration. Security and endpoint configuration. This is a contract reference, not a backend hosted by speedle.io. (function() { var url = "\/swagger\/asserter.yaml"; const ui = SwaggerUIBundle({ url: url, dom_id: '#swagger-ui', deepLinking: true, presets: [ SwaggerUIBundle.presets.apis ], plugins: [ SwaggerUIBundle.