feat: Fine-Grained Authorization with Keycloak-Core Policy Engine by lakhansamani · Pull Request #607 · authorizerdev/authorizer

Commits on Apr 13, 2026

feat(authz): add authorization schemas and constants
lakhansamani
committed
feat(authz): extend storage provider interface with 28 authorization methods
lakhansamani
committed
feat(authz): implement SQL storage provider for authorization
lakhansamani
committed
feat(authz): implement MongoDB storage provider for authorization
lakhansamani
committed
feat(authz): implement ArangoDB, Cassandra, Couchbase, DynamoDB providers
lakhansamani
committed
feat(authz): implement authorization evaluation engine
lakhansamani
committed
feat(authz): add cache methods to memory store providers
lakhansamani
committed

Commits on Apr 14, 2026

Commits on Apr 21, 2026

Commits on Apr 22, 2026

Commits on Apr 30, 2026

fix(authz): explicit deny semantics, role-aware cache key, atomic UpdatePermission, duplicate detection
lakhansamani
committed

Commits on May 4, 2026

fix(authz,dashboard): wire typo warn, SPA deep-link fallback, deny attribution, dashboard tab paths
lakhansamani
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

feat: Fine-Grained Authorization with Keycloak-Core Policy Engine#607

feat: Fine-Grained Authorization with Keycloak-Core Policy Engine#607
lakhansamani wants to merge 28 commits into
mainfrom
feat/fine-grained-authorization

Commits on Apr 13, 2026

feat(authz): add authorization schemas and constants

feat(authz): extend storage provider interface with 28 authorization methods

feat(authz): implement SQL storage provider for authorization

feat(authz): implement MongoDB storage provider for authorization

feat(authz): implement ArangoDB, Cassandra, Couchbase, DynamoDB providers

feat(authz): implement authorization evaluation engine

feat(authz): add cache methods to memory store providers

Commits on Apr 14, 2026

feat(authz): add CLI flags and wire authorization provider

feat(authz): add authorization GraphQL schema and resolvers

feat(authz): implement authorization GraphQL handlers

feat(authz): add REST check-permission endpoint

test(authz): add comprehensive authorization integration tests

feat(authz): add authorization dashboard UI

fix(authz): address security audit findings (H-1, H-2, C-2, C-3, M-3)

chore(deps): upgrade pgx v5.5.4->v5.9.1, gorm postgres v1.5.4->v1.6.0

Commits on Apr 21, 2026

feat(authz): add Prometheus metrics for check outcomes, unmatched checks, and latency

feat(authz): add per-key warn rate limiter for unmatched checks

fix(authz): rewrite warn-limiter tests to avoid || short-circuit

feat(authz): add in-process per-(resource,scope) unmatched counter

feat(authz): drop 'disabled' mode, wire metrics and rate-limited warn for unmatched checks

refactor(authz): use testSetupWithAuthzMode helper; clarify test-default rationale

feat(authz): default enforcement to permissive, migrate legacy 'disabled' with one-time log

Commits on Apr 22, 2026

refactor(authz): simplify NormalizeAuthzEnforcement and log startup permission-probe errors

fix(authz): pagination offset, fail-closed validation, typed valid-set cache, DoS caps

fix(authz): compensating rollback, typo-tolerant flag, string constants, test coverage

refactor(authz): drop phantom error return, startup probe timeout, safer cache decode, shared identifier constant

Commits on Apr 30, 2026

fix(authz): explicit deny semantics, role-aware cache key, atomic UpdatePermission, duplicate detection

Commits on May 4, 2026

fix(authz,dashboard): wire typo warn, SPA deep-link fallback, deny attribution, dashboard tab paths