aws-samples / aws-samples/sample-authzen-interface-verified-permissions
update to "Authorization API 1.0 – draft 05"
- Dominant language
- TypeScript
- Stars
- 9
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Description
Workgroup OpenID AuthZEN published "Authorization API 1.0 – draft 05" on 8 November 2025 at https://openid.github.io/authzen/
Changes from draft 02 include new APIs and HTTPS bindings:
- Subject Search API
- Resource Search API
- Action Search API
- Policy Decision Point Metadata
Test data (request and response payloads) for each of the API requests in the Search scenario available at [Payload Spec](https://authzen-interop.net/docs/scenarios/search/).
Missing from the current implementation is [Request Identification](https://openid.github.io/authzen/#name-request-identification) using the HTTPS Header `X-Request-ID`.
> If the PEP specified a request identifier in the request, the PDP MUST include the same identifier in the response to that request.
Contributor guide
Assessment
This issue has not been assessed yet.