Authorization Check

{
  action: string           // Required: The action to check (e.g. "list_users", "create_policy")
  resourceType?: string    // Optional: Resource type (default: "dashboard")
  context?: object         // Optional: Additional context for the authorization decision
}

curl -X POST http://localhost:3100/api/authz/check \
  -H "Authorization: Bearer your-admin-token" \
  -H "Content-Type: application/json" \
  -d '{
    "action": "create_policy",
    "resourceType": "dashboard"
  }'

{
  "allowed": true,
  "reason": "permit policy matched"
}

{
  actions: Array<{
    action: string           // Required: Action to check
    resourceType?: string    // Optional: Resource type (default: "dashboard")
  }>
}

curl -X POST http://localhost:3100/api/authz/check-batch \
  -H "Authorization: Bearer your-admin-token" \
  -H "Content-Type: application/json" \
  -d '{
    "actions": [
      { "action": "list_users" },
      { "action": "create_policy" },
      { "action": "delete_provider" }
    ]
  }'

{
  "results": [
    { "action": "list_users", "allowed": true },
    { "action": "create_policy", "allowed": true },
    { "action": "delete_provider", "allowed": false }
  ]
}