com.assisi-assisi-authz-core (1.0.0)

Published 2026-09-08 16:44:57 -05:00 by frank

Installation

<repositories>
	<repository>
		<id>gitea</id>
		<url></url>
	</repository>
</repositories>

<distributionManagement>
	<repository>
		<id>gitea</id>
		<url></url>
	</repository>

	<snapshotRepository>
		<id>gitea</id>
		<url></url>
	</snapshotRepository>
</distributionManagement>
<dependency>
	<groupId>com.assisi</groupId>
	<artifactId>assisi-authz-core</artifactId>
	<version>1.0.0</version>
</dependency>
mvn install
mvn dependency:get -DremoteRepositories= -Dartifact=com.assisi:assisi-authz-core:1.0.0

About this package

Shared permission EVALUATION for assisi (CONVENTIONS Appendix L). Ships the evaluator, its Valkey read path, the @RequiresPermission annotation and its interceptor, and a shared audit-actor utility. Exists so the Gateway and every backend service answer "does this caller hold this permission" IDENTICALLY. Two independent implementations of that question is a security defect waiting to happen: the Gateway allows a call the service would have denied, or the reverse, and the difference is invisible until it is exploited. Ships NO policy definitions, NO database, and NO entities.

Dependencies

org.springframework.boot:spring-boot-data-redis
org.springframework.boot:spring-boot-starter-aspectj
org.springframework.boot:spring-boot-autoconfigure
org.springframework.boot:spring-boot-starter-test
org.testcontainers:testcontainers-junit-jupiter
com.tngtech.archunit:archunit-junit5
Details
Maven
2026-09-08 16:44:57 -05:00
5
16 KiB
Assets (2)
Versions (1) View all
1.0.0 2026-09-08