aws-samples / aws-samples/sample-authzen-interface-verified-permissions

update to "Authorization API 1.0 – draft 05"

Open
#3 2 comments 0 reactions 1 assignee Claimed by @hakanson View on GitHub
enhancement
Dominant language
TypeScript
Stars
9
Forks
0
PR merge metrics
No merged PRs in 30d

Description

Workgroup OpenID AuthZEN published "Authorization API 1.0 – draft 05" on 8 November 2025 at https://openid.github.io/authzen/

Changes from draft 02 include new APIs and HTTPS bindings:
- Subject Search API
- Resource Search API
- Action Search API
- Policy Decision Point Metadata

Test data (request and response payloads) for each of the API requests in the Search scenario available at [Payload Spec](https://authzen-interop.net/docs/scenarios/search/).

Missing from the current implementation is [Request Identification](https://openid.github.io/authzen/#name-request-identification) using the HTTPS Header `X-Request-ID`.

> If the PEP specified a request identifier in the request, the PDP MUST include the same identifier in the response to that request.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.