ReBAC API

ReBAC Service

The rebac-srv exposes read-only, decision-time Relationship-Based Access Control (ReBAC) APIs backed by Relation Store. It is used at runtime by policy-decision-srv when Rego policies call rebac.* builtins.

Administrative schema, tuple, catalog, and import/export APIs remain on policy-management-srv.

See ReBAC for concepts and Rego integration.

Authentication

OAuth 2.0: oauth2

Security Scheme Type:	oauth2
OAuth Flow (authorizationCode):	Token URL: https://domain/token-srv/token Authorization URL: https://domain/authz-srv/authz Refresh URL: https://domain/token-srv/token Scopes: cidaas:authzen_read: read AuthZEN policies and configuration cidaas:authzen_write: create and update AuthZEN resources cidaas:authzen_delete: delete AuthZEN resources cidaas:authzen_rebac_read: read ReBAC schema and relationships
OAuth Flow (clientCredentials):	Token URL: https://domain/token-srv/token Scopes: cidaas:authzen_read: read AuthZEN policies and configuration cidaas:authzen_write: create and update AuthZEN resources cidaas:authzen_delete: delete AuthZEN resources cidaas:authzen_rebac_read: read ReBAC schema and relationships