feat(authz): add Cedar-based authorization tier with deferred API-key authn#10

Merged

jmgilman merged 10 commits into

feat/authz-tier

Jun 24, 2026

Commits on Jun 24, 2026

feat(authz): add base authz package + API-key authn (phase A)

jmgilman
and
claude
committed
fix(authz): address phase A review findings

jmgilman
and
claude
committed
refactor(postgres): set sqlc omit_unused_structs to keep the todo sqlc package todo-only
jmgilman
committed
refactor(authz): precedence fix, URL-id binding, install/finalize split

jmgilman
and
claude
committed
feat(authz): add todo authz slice, tag routes, enable authz (phase B)

jmgilman
and
claude
committed
fix(authz): address phase B review findings

jmgilman
and
claude
committed
test(authz): container-backed APIKeyStore + e2e functional authz coverage (phase C)

jmgilman
and
claude
committed
test(authz): tighten phase C test comments (drop design refs, correct URL-id claim)
jmgilman
committed
docs(authz): mock-keys seed + README/DELETE_ME/docs for the authz tier (phase D)

jmgilman
and
claude
committed
docs(authz): correct apikey.go sqlc note, create-response example, compose curl comment
jmgilman
committed