ilpanich / axiam-go-sdk / 29513269584

95%

push

github

feat(middleware): add RequireAuth/RequireAccess/RequireRole route wrappers (CONTRACT §11) (#8)

* docs(contract): sync CONTRACT.md §11 declarative authorization helpers

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01C5foj8NVCeS9qUW94kJ13g

* feat(middleware): add RequireAuth/RequireAccess/RequireRole route wrappers (CONTRACT §11)

Adds the Go equivalent of the CONTRACT.md §11 declarative authorization
helpers: since Go has no macro/annotation/decorator facility, these are
per-route http.Handler wrappers under the same canonical vocabulary as
every other AXIAM SDK.

- middleware.RequireAuth() requires an already-injected identity (401).
- middleware.RequireAccess(checker, action, resolve, opts...) requires the
  request's authenticated caller to pass an authorization check for a
  resource resolved via middleware.ResourceFromPath/StaticResource or a
  custom middleware.ResourceResolver; fails closed (503) on any transport
  error, 400 on an unresolvable resource, 403 on deny, and never caches
  decisions.
- middleware.RequireRole(roles...) is a local, no-round-trip claim check.
- Client.CheckAccessAs is an additive method (existing CheckAccess is
  unchanged) so RequireAccess can check the request's own authenticated
  user_id rather than the application's own client session.

Extends examples/middleware-guard with a RequireAccess-protected
GET /docs/{id} route, and updates the README/CHANGELOG accordingly.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01C5foj8NVCeS9qUW94kJ13g

* docs: use en-dash in CONTRACT §1–§11 conformance statement

Match the exact wording in CONTRACT.md's Closing Notes (en-dash U+2013).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01C5foj8NVCeS9qUW94kJ13g

---------

Co-authored-by: Claude <noreply@anthropic.com>

116 of 116 new or added lines in 2 files covered. (100.0%)

1819 of 1918 relevant lines covered (94.84%)

529.29 hits per line