Skip to content

core: Authorization SPI Refactor (Draft)#3681

Draft
sungwy wants to merge 4 commits intoapache:mainfrom
sungwy:auth-refactor
Draft

core: Authorization SPI Refactor (Draft)#3681
sungwy wants to merge 4 commits intoapache:mainfrom
sungwy:auth-refactor

Conversation

@sungwy
Copy link
Contributor

@sungwy sungwy commented Feb 6, 2026

This is a Draft PR I prepared to aid reviewing the new Authorization SPI Refactoring RFC

Checklist

  • 🛡️ Don't disclose security issues! (contact security@apache.org)
  • 🔗 Clearly explained why the changes are needed, or linked related issues: Fixes #
  • 🧪 Added/updated tests with good coverage, or manually tested (and explained how)
  • 💡 Added comments for complex logic
  • 🧾 Updated CHANGELOG.md (if needed)
  • 📚 Updated documentation in site/content/in-dev/unreleased (if needed)

op,
rootContainerWrapper,
null /* secondary */);
AuthorizationCallContext authzContext = new AuthorizationCallContext(resolutionManifest);
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Would it be possible to inject it from CDI? Ideally resolutionManifest should also be a request-scoped (auto-created) bean, but for a start we could add it to AuthorizationCallContext manually since AuthorizationCallContext is expected to be mutable anyway 🤔 WDYT?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants