Why I Built opa-authzen-interop: Verifying OPA on AuthZEN Interop
Introduction In my earlier post, I Built an OPA Plugin That Turns It Into an AuthZEN-Compatible PDP, I covered how I added AuthZEN API support (POST /access/v1/evaluation) directly to OPA. When I l...

Source: DEV Community
Introduction In my earlier post, I Built an OPA Plugin That Turns It Into an AuthZEN-Compatible PDP, I covered how I added AuthZEN API support (POST /access/v1/evaluation) directly to OPA. When I looked at the interop results page, I saw multiple projects already validating on the same scenario. That became the main reason I started this repo: I wanted to put my implementation on the same field and verify it there too. So I built opa-authzen-interop. Repo: https://github.com/kanywst/opa-authzen-interop What This Article Covers Why I separated an interop-focused repo from the plugin repo How other projects are participating in OpenID AuthZEN interop Where opa-authzen-interop stands today and what comes next The article assumes basic familiarity with PDP/PEP and the AuthZEN Authorization API. Why A Separate Repo opa-authzen-plugin is responsible for one thing: implementing the AuthZEN API in OPA. interop is responsible for something different: locking scenario-specific policy/data/tests