NewDefaultAuthorizer creates a default authorizer.

NewInterceptor creates an authorization interceptor.

NewMockAuthorizer creates a new mock instance.

NewMockClaimMapper creates a new mock instance.

NewMockClaimMapperWithAuthInfoRequired creates a new mock instance.

NewMockhasNamespace creates a new mock instance.

NewNoopAuthorizer creates a no-op authorizer.

PeerCert extracts an x509 certificate from given tlsInfo.

TLSInfoFromContext extracts TLS information from the context's peer value.

DecisionAllow means auth decision is allow.

DecisionDeny means auth decision is deny.

@@@SNIPSTART temporal-common-authorization-role-enum User authz within the context of an entity, such as system, namespace or workflow.

@@@SNIPSTART temporal-common-authorization-role-enum User authz within the context of an entity, such as system, namespace or workflow.

@@@SNIPSTART temporal-common-authorization-role-enum User authz within the context of an entity, such as system, namespace or workflow.

@@@SNIPSTART temporal-common-authorization-role-enum User authz within the context of an entity, such as system, namespace or workflow.

@@@SNIPSTART temporal-common-authorization-role-enum User authz within the context of an entity, such as system, namespace or workflow.

@@@SNIPSTART temporal-common-authorization-authinfo Authentication information from subject's JWT token or/and mTLS certificate.

@@@SNIPSTART temporal-common-authorization-authorizer-calltarget CallTarget is contains information for Authorizer to make a decision.

@@@SNIPSTART temporal-common-authorization-claims Claims contains the identity of the subject and subject's roles at the system level and for individual namespaces.

MockAuthorizer is a mock of Authorizer interface.

MockAuthorizerMockRecorder is the mock recorder for MockAuthorizer.

MockClaimMapper is a mock of ClaimMapper interface.

MockClaimMapperMockRecorder is the mock recorder for MockClaimMapper.

MockClaimMapperWithAuthInfoRequired is a mock of ClaimMapperWithAuthInfoRequired interface.

MockClaimMapperWithAuthInfoRequiredMockRecorder is the mock recorder for MockClaimMapperWithAuthInfoRequired.

MockhasNamespace is a mock of hasNamespace interface.

MockhasNamespaceMockRecorder is the mock recorder for MockhasNamespace.

@@@SNIPSTART temporal-common-authorization-authorizer-interface Authorizer is an interface for implementing authorization logic.

@@@SNIPSTART temporal-common-authorization-claimmapper-interface ClaimMapper converts authorization info of a subject into Temporal claims (permissions) for authorization.

Normally, GetClaims will never be called without either an auth token or TLS metadata set in AuthInfo.

RawTokenKeyProvider is a TokenKeyProvider that provides keys for validating JWT tokens.

@@@SNIPSTART temporal-common-authorization-tokenkeyprovider-interface Provides keys for validating JWT tokens.