Lattice.Hub

鉴权策略与资源授权。

默认 Base URL：http://127.0.0.1:8090。管理面接口需 Authorization（登录返回的 token）。

鉴权 · 策略

鉴权策略与资源授权。

GET/auth/v1/policies需要鉴权

查询策略

查询策略。

参数

Authorizationheader · string必填
登录返回的 token。
idquery · string可选
id
namequery · string可选
name
defaultquery · string可选
default
res_idquery · string可选
res_id
res_typequery · string可选
res_type
principal_idquery · string可选
principal_id
principal_typequery · string可选
principal_type
show_detailquery · string可选
show_detail
offsetquery · integer可选
offset
limitquery · integer可选
limit

请求示例

curl -sS -X GET 'http://127.0.0.1:8090/auth/v1/policies' \
  -H "Authorization: $TOKEN"

响应示例

{
  "code": 200000,
  "info": "execute success"
}

POST/auth/v1/policies需要鉴权

创建策略

创建策略。

参数

Authorizationheader · string必填
登录返回的 token。
(body)body · AuthStrategy[]必填
请求体为 AuthStrategy 的 JSON 数组；下列为单条字段。
idbody · string可选
id
namebody · string可选
name
principalsbody · Principals可选
principals
- usersbody · Principal[]可选
  users
  - idbody · string可选
    id
  - namebody · string可选
    name
- groupsbody · Principal[]可选
  groups
  - idbody · string可选
    id
  - namebody · string可选
    name
- rolesbody · Principal[]可选
  roles
  - idbody · string可选
    id
  - namebody · string可选
    name
resourcesbody · StrategyResources可选
resources
- strategy_idbody · string可选
  strategy_id
- namespacesbody · StrategyResourceEntry[]可选
  namespaces
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- servicesbody · StrategyResourceEntry[]可选
  services
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- config_groupsbody · StrategyResourceEntry[]可选
  config_groups
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- route_rulesbody · StrategyResourceEntry[]可选
  route_rules
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- ratelimit_rulesbody · StrategyResourceEntry[]可选
  ratelimit_rules
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- circuitbreaker_rulesbody · StrategyResourceEntry[]可选
  circuitbreaker_rules
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- faultdetect_rulesbody · StrategyResourceEntry[]可选
  faultdetect_rules
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- lane_rulesbody · StrategyResourceEntry[]可选
  lane_rules
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- lossless_rulesbody · StrategyResourceEntry[]可选
  lossless_rules
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- mirror_rulesbody · StrategyResourceEntry[]可选
  mirror_rules
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- security_rulesbody · StrategyResourceEntry[]可选
  security_rules
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- mock_rulesbody · StrategyResourceEntry[]可选
  mock_rules
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- usersbody · StrategyResourceEntry[]可选
  users
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- user_groupsbody · StrategyResourceEntry[]可选
  user_groups
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- rolesbody · StrategyResourceEntry[]可选
  roles
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- auth_policiesbody · StrategyResourceEntry[]可选
  auth_policies
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- mcp_serversbody · StrategyResourceEntry[]可选
  mcp_servers
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- a2a_agentsbody · StrategyResourceEntry[]可选
  a2a_agents
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
actionbody · enum(AuthAction)可选
action 枚举：ONLY_READ | READ_WRITE | ALLOW | DENY
commentbody · string可选
comment
ownerbody · string可选
owner
auth_tokenbody · string可选
auth_token
default_strategybody · bool可选
default_strategy
metadatabody · map<string,string>可选
metadata
sourcebody · string可选
source
functionsbody · string[]可选
functions
resource_labelsbody · StrategyResourceLabel[]可选
resource_labels
- keybody · string可选
  key
- valuebody · string可选
  value
- compare_typebody · string可选
  compare_type

响应字段

codebody · uint32必填
业务码。
infobody · string可选
提示信息。
AuthStrategybody · AuthStrategy可选
实体字段。
- idbody · string可选
  id
- namebody · string可选
  name
- principalsbody · Principals可选
  principals
  - usersbody · Principal[]可选
    users
    - idbody · string可选
      id
    - namebody · string可选
      name
  - groupsbody · Principal[]可选
    groups
    - idbody · string可选
      id
    - namebody · string可选
      name
  - rolesbody · Principal[]可选
    roles
    - idbody · string可选
      id
    - namebody · string可选
      name
- resourcesbody · StrategyResources可选
  resources
  - strategy_idbody · string可选
    strategy_id
  - namespacesbody · StrategyResourceEntry[]可选
    namespaces
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - servicesbody · StrategyResourceEntry[]可选
    services
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - config_groupsbody · StrategyResourceEntry[]可选
    config_groups
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - route_rulesbody · StrategyResourceEntry[]可选
    route_rules
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - ratelimit_rulesbody · StrategyResourceEntry[]可选
    ratelimit_rules
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - circuitbreaker_rulesbody · StrategyResourceEntry[]可选
    circuitbreaker_rules
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - faultdetect_rulesbody · StrategyResourceEntry[]可选
    faultdetect_rules
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - lane_rulesbody · StrategyResourceEntry[]可选
    lane_rules
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - lossless_rulesbody · StrategyResourceEntry[]可选
    lossless_rules
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - mirror_rulesbody · StrategyResourceEntry[]可选
    mirror_rules
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - security_rulesbody · StrategyResourceEntry[]可选
    security_rules
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - mock_rulesbody · StrategyResourceEntry[]可选
    mock_rules
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - usersbody · StrategyResourceEntry[]可选
    users
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - user_groupsbody · StrategyResourceEntry[]可选
    user_groups
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - rolesbody · StrategyResourceEntry[]可选
    roles
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - auth_policiesbody · StrategyResourceEntry[]可选
    auth_policies
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - mcp_serversbody · StrategyResourceEntry[]可选
    mcp_servers
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - a2a_agentsbody · StrategyResourceEntry[]可选
    a2a_agents
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
- actionbody · enum(AuthAction)可选
  action 枚举：ONLY_READ | READ_WRITE | ALLOW | DENY
- commentbody · string可选
  comment
- ownerbody · string可选
  owner
- ctimebody · string可选
  ctime
- mtimebody · string可选
  mtime
- auth_tokenbody · string可选
  auth_token
- default_strategybody · bool可选
  default_strategy
- metadatabody · map<string,string>可选
  metadata
- sourcebody · string可选
  source
- functionsbody · string[]可选
  functions
- resource_labelsbody · StrategyResourceLabel[]可选
  resource_labels
  - keybody · string可选
    key
  - valuebody · string可选
    value
  - compare_typebody · string可选
    compare_type

请求示例

curl -sS -X POST 'http://127.0.0.1:8090/auth/v1/policies' \
  -H "Authorization: $TOKEN" \
  -H 'Content-Type: application/json' \
  -d '[]'

响应示例

{
  "code": 200000,
  "info": "execute success"
}

PUT/auth/v1/policies需要鉴权

更新策略

更新策略。

参数

Authorizationheader · string必填
登录返回的 token。
(body)body · AuthStrategy[]必填
请求体为 AuthStrategy 的 JSON 数组；下列为单条字段。
idbody · string可选
id
namebody · string可选
name
principalsbody · Principals可选
principals
- usersbody · Principal[]可选
  users
  - idbody · string可选
    id
  - namebody · string可选
    name
- groupsbody · Principal[]可选
  groups
  - idbody · string可选
    id
  - namebody · string可选
    name
- rolesbody · Principal[]可选
  roles
  - idbody · string可选
    id
  - namebody · string可选
    name
resourcesbody · StrategyResources可选
resources
- strategy_idbody · string可选
  strategy_id
- namespacesbody · StrategyResourceEntry[]可选
  namespaces
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- servicesbody · StrategyResourceEntry[]可选
  services
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- config_groupsbody · StrategyResourceEntry[]可选
  config_groups
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- route_rulesbody · StrategyResourceEntry[]可选
  route_rules
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- ratelimit_rulesbody · StrategyResourceEntry[]可选
  ratelimit_rules
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- circuitbreaker_rulesbody · StrategyResourceEntry[]可选
  circuitbreaker_rules
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- faultdetect_rulesbody · StrategyResourceEntry[]可选
  faultdetect_rules
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- lane_rulesbody · StrategyResourceEntry[]可选
  lane_rules
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- lossless_rulesbody · StrategyResourceEntry[]可选
  lossless_rules
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- mirror_rulesbody · StrategyResourceEntry[]可选
  mirror_rules
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- security_rulesbody · StrategyResourceEntry[]可选
  security_rules
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- mock_rulesbody · StrategyResourceEntry[]可选
  mock_rules
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- usersbody · StrategyResourceEntry[]可选
  users
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- user_groupsbody · StrategyResourceEntry[]可选
  user_groups
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- rolesbody · StrategyResourceEntry[]可选
  roles
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- auth_policiesbody · StrategyResourceEntry[]可选
  auth_policies
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- mcp_serversbody · StrategyResourceEntry[]可选
  mcp_servers
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- a2a_agentsbody · StrategyResourceEntry[]可选
  a2a_agents
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
actionbody · enum(AuthAction)可选
action 枚举：ONLY_READ | READ_WRITE | ALLOW | DENY
commentbody · string可选
comment
ownerbody · string可选
owner
auth_tokenbody · string可选
auth_token
default_strategybody · bool可选
default_strategy
metadatabody · map<string,string>可选
metadata
sourcebody · string可选
source
functionsbody · string[]可选
functions
resource_labelsbody · StrategyResourceLabel[]可选
resource_labels
- keybody · string可选
  key
- valuebody · string可选
  value
- compare_typebody · string可选
  compare_type

响应字段

codebody · uint32必填
业务码。
infobody · string可选
提示信息。
AuthStrategybody · AuthStrategy可选
实体字段。
- idbody · string可选
  id
- namebody · string可选
  name
- principalsbody · Principals可选
  principals
  - usersbody · Principal[]可选
    users
    - idbody · string可选
      id
    - namebody · string可选
      name
  - groupsbody · Principal[]可选
    groups
    - idbody · string可选
      id
    - namebody · string可选
      name
  - rolesbody · Principal[]可选
    roles
    - idbody · string可选
      id
    - namebody · string可选
      name
- resourcesbody · StrategyResources可选
  resources
  - strategy_idbody · string可选
    strategy_id
  - namespacesbody · StrategyResourceEntry[]可选
    namespaces
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - servicesbody · StrategyResourceEntry[]可选
    services
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - config_groupsbody · StrategyResourceEntry[]可选
    config_groups
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - route_rulesbody · StrategyResourceEntry[]可选
    route_rules
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - ratelimit_rulesbody · StrategyResourceEntry[]可选
    ratelimit_rules
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - circuitbreaker_rulesbody · StrategyResourceEntry[]可选
    circuitbreaker_rules
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - faultdetect_rulesbody · StrategyResourceEntry[]可选
    faultdetect_rules
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - lane_rulesbody · StrategyResourceEntry[]可选
    lane_rules
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - lossless_rulesbody · StrategyResourceEntry[]可选
    lossless_rules
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - mirror_rulesbody · StrategyResourceEntry[]可选
    mirror_rules
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - security_rulesbody · StrategyResourceEntry[]可选
    security_rules
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - mock_rulesbody · StrategyResourceEntry[]可选
    mock_rules
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - usersbody · StrategyResourceEntry[]可选
    users
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - user_groupsbody · StrategyResourceEntry[]可选
    user_groups
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - rolesbody · StrategyResourceEntry[]可选
    roles
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - auth_policiesbody · StrategyResourceEntry[]可选
    auth_policies
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - mcp_serversbody · StrategyResourceEntry[]可选
    mcp_servers
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - a2a_agentsbody · StrategyResourceEntry[]可选
    a2a_agents
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
- actionbody · enum(AuthAction)可选
  action 枚举：ONLY_READ | READ_WRITE | ALLOW | DENY
- commentbody · string可选
  comment
- ownerbody · string可选
  owner
- ctimebody · string可选
  ctime
- mtimebody · string可选
  mtime
- auth_tokenbody · string可选
  auth_token
- default_strategybody · bool可选
  default_strategy
- metadatabody · map<string,string>可选
  metadata
- sourcebody · string可选
  source
- functionsbody · string[]可选
  functions
- resource_labelsbody · StrategyResourceLabel[]可选
  resource_labels
  - keybody · string可选
    key
  - valuebody · string可选
    value
  - compare_typebody · string可选
    compare_type

请求示例

curl -sS -X PUT 'http://127.0.0.1:8090/auth/v1/policies' \
  -H "Authorization: $TOKEN" \
  -H 'Content-Type: application/json' \
  -d '[]'

响应示例

{
  "code": 200000,
  "info": "execute success"
}

POST/auth/v1/policies/delete需要鉴权

删除策略

删除策略。

参数

Authorizationheader · string必填
登录返回的 token。
(body)body · AuthStrategy[]必填
请求体为 AuthStrategy 的 JSON 数组；下列为单条字段。
idbody · string可选
id
namebody · string可选
name
principalsbody · Principals可选
principals
- usersbody · Principal[]可选
  users
  - idbody · string可选
    id
  - namebody · string可选
    name
- groupsbody · Principal[]可选
  groups
  - idbody · string可选
    id
  - namebody · string可选
    name
- rolesbody · Principal[]可选
  roles
  - idbody · string可选
    id
  - namebody · string可选
    name
resourcesbody · StrategyResources可选
resources
- strategy_idbody · string可选
  strategy_id
- namespacesbody · StrategyResourceEntry[]可选
  namespaces
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- servicesbody · StrategyResourceEntry[]可选
  services
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- config_groupsbody · StrategyResourceEntry[]可选
  config_groups
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- route_rulesbody · StrategyResourceEntry[]可选
  route_rules
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- ratelimit_rulesbody · StrategyResourceEntry[]可选
  ratelimit_rules
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- circuitbreaker_rulesbody · StrategyResourceEntry[]可选
  circuitbreaker_rules
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- faultdetect_rulesbody · StrategyResourceEntry[]可选
  faultdetect_rules
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- lane_rulesbody · StrategyResourceEntry[]可选
  lane_rules
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- lossless_rulesbody · StrategyResourceEntry[]可选
  lossless_rules
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- mirror_rulesbody · StrategyResourceEntry[]可选
  mirror_rules
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- security_rulesbody · StrategyResourceEntry[]可选
  security_rules
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- mock_rulesbody · StrategyResourceEntry[]可选
  mock_rules
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- usersbody · StrategyResourceEntry[]可选
  users
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- user_groupsbody · StrategyResourceEntry[]可选
  user_groups
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- rolesbody · StrategyResourceEntry[]可选
  roles
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- auth_policiesbody · StrategyResourceEntry[]可选
  auth_policies
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- mcp_serversbody · StrategyResourceEntry[]可选
  mcp_servers
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
- a2a_agentsbody · StrategyResourceEntry[]可选
  a2a_agents
  - idbody · string可选
    id
  - namespacebody · string可选
    namespace
  - namebody · string可选
    name
actionbody · enum(AuthAction)可选
action 枚举：ONLY_READ | READ_WRITE | ALLOW | DENY
commentbody · string可选
comment
ownerbody · string可选
owner
auth_tokenbody · string可选
auth_token
default_strategybody · bool可选
default_strategy
metadatabody · map<string,string>可选
metadata
sourcebody · string可选
source
functionsbody · string[]可选
functions
resource_labelsbody · StrategyResourceLabel[]可选
resource_labels
- keybody · string可选
  key
- valuebody · string可选
  value
- compare_typebody · string可选
  compare_type

响应字段

codebody · uint32必填
业务码。
infobody · string可选
提示信息。
AuthStrategybody · AuthStrategy可选
实体字段。
- idbody · string可选
  id
- namebody · string可选
  name
- principalsbody · Principals可选
  principals
  - usersbody · Principal[]可选
    users
    - idbody · string可选
      id
    - namebody · string可选
      name
  - groupsbody · Principal[]可选
    groups
    - idbody · string可选
      id
    - namebody · string可选
      name
  - rolesbody · Principal[]可选
    roles
    - idbody · string可选
      id
    - namebody · string可选
      name
- resourcesbody · StrategyResources可选
  resources
  - strategy_idbody · string可选
    strategy_id
  - namespacesbody · StrategyResourceEntry[]可选
    namespaces
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - servicesbody · StrategyResourceEntry[]可选
    services
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - config_groupsbody · StrategyResourceEntry[]可选
    config_groups
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - route_rulesbody · StrategyResourceEntry[]可选
    route_rules
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - ratelimit_rulesbody · StrategyResourceEntry[]可选
    ratelimit_rules
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - circuitbreaker_rulesbody · StrategyResourceEntry[]可选
    circuitbreaker_rules
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - faultdetect_rulesbody · StrategyResourceEntry[]可选
    faultdetect_rules
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - lane_rulesbody · StrategyResourceEntry[]可选
    lane_rules
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - lossless_rulesbody · StrategyResourceEntry[]可选
    lossless_rules
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - mirror_rulesbody · StrategyResourceEntry[]可选
    mirror_rules
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - security_rulesbody · StrategyResourceEntry[]可选
    security_rules
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - mock_rulesbody · StrategyResourceEntry[]可选
    mock_rules
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - usersbody · StrategyResourceEntry[]可选
    users
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - user_groupsbody · StrategyResourceEntry[]可选
    user_groups
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - rolesbody · StrategyResourceEntry[]可选
    roles
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - auth_policiesbody · StrategyResourceEntry[]可选
    auth_policies
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - mcp_serversbody · StrategyResourceEntry[]可选
    mcp_servers
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
  - a2a_agentsbody · StrategyResourceEntry[]可选
    a2a_agents
    - idbody · string可选
      id
    - namespacebody · string可选
      namespace
    - namebody · string可选
      name
- actionbody · enum(AuthAction)可选
  action 枚举：ONLY_READ | READ_WRITE | ALLOW | DENY
- commentbody · string可选
  comment
- ownerbody · string可选
  owner
- ctimebody · string可选
  ctime
- mtimebody · string可选
  mtime
- auth_tokenbody · string可选
  auth_token
- default_strategybody · bool可选
  default_strategy
- metadatabody · map<string,string>可选
  metadata
- sourcebody · string可选
  source
- functionsbody · string[]可选
  functions
- resource_labelsbody · StrategyResourceLabel[]可选
  resource_labels
  - keybody · string可选
    key
  - valuebody · string可选
    value
  - compare_typebody · string可选
    compare_type

请求示例

curl -sS -X POST 'http://127.0.0.1:8090/auth/v1/policies/delete' \
  -H "Authorization: $TOKEN" \
  -H 'Content-Type: application/json' \
  -d '[]'

响应示例

{
  "code": 200000,
  "info": "execute success"
}

GET/auth/v1/policies/detail需要鉴权

策略详情

策略详情。

参数

Authorizationheader · string必填
登录返回的 token。
idquery · string必填
id

请求示例

curl -sS -X GET 'http://127.0.0.1:8090/auth/v1/policies/detail' \
  -H "Authorization: $TOKEN"

响应示例

{
  "code": 200000,
  "info": "execute success"
}

GET/auth/v1/principal/resources需要鉴权

主体关联资源

主体关联资源。

参数

Authorizationheader · string必填
登录返回的 token。
principal_idquery · string必填
principal_id
principal_typequery · string必填
principal_type

请求示例

curl -sS -X GET 'http://127.0.0.1:8090/auth/v1/principal/resources' \
  -H "Authorization: $TOKEN"

响应示例

{
  "code": 200000,
  "info": "execute success"
}

GET/auth/v1/resources/principals需要鉴权

资源关联主体

资源关联主体。

参数

Authorizationheader · string必填
登录返回的 token。
res_idquery · string可选
res_id
res_typequery · string可选
res_type

请求示例

curl -sS -X GET 'http://127.0.0.1:8090/auth/v1/resources/principals' \
  -H "Authorization: $TOKEN"

响应示例

{
  "code": 200000,
  "info": "execute success"
}

POST/auth/v1/resources/authorize需要鉴权

资源授权校验

资源授权校验。

参数

Authorizationheader · string必填
登录返回的 token。
(body)body · AuthorizeResources[]必填
请求体为 AuthorizeResources 的 JSON 数组；下列为单条字段。
principal_idbody · string可选
主体 ID。
principal_typebody · string可选
主体类型。
resourcesbody · string[]可选
资源列表。

响应字段

codebody · uint32必填
业务码。
infobody · string可选
提示信息。
AuthorizeResourcesbody · AuthorizeResources可选
实体字段。
- principal_idbody · string可选
  主体 ID。
- principal_typebody · string可选
  主体类型。
- resourcesbody · string[]可选
  资源列表。

请求示例

curl -sS -X POST 'http://127.0.0.1:8090/auth/v1/resources/authorize' \
  -H "Authorization: $TOKEN" \
  -H 'Content-Type: application/json' \
  -d '[]'

响应示例

{
  "code": 200000,
  "info": "execute success"
}

策略

查询策略

创建策略

更新策略

删除策略

策略详情

主体关联资源

资源关联主体

资源授权校验

On this page