BlogEngine.Authorizer behaviour (blog_engine v0.1.0)

Validates command actors and delegates authorization to the host application.

Summary

Authorizes one BlogEngine action in the host application's policy layer.

actions()

Returns the canonical action catalog accepted by BlogEngine authorizers.

actor(context)

Returns the validated canonical actor identity for a command context.

Validates the command actor, then invokes the context-selected authorizer.

@callback authorize(BlogEngine.Context.t(), atom(), struct() | map()) ::
  :ok | {:error, :forbidden}

Authorizes one BlogEngine action in the host application's policy layer.

@spec actions() :: [atom()]

Returns the canonical action catalog accepted by BlogEngine authorizers.

@spec actor(BlogEngine.Context.t()) ::
  {:ok, %{type: String.t(), key: String.t()}} | {:error, BlogEngine.Error.t()}

Returns the validated canonical actor identity for a command context.

@spec authorize(BlogEngine.Context.t(), atom(), struct() | map()) ::
  :ok | {:error, BlogEngine.Error.t()}

Validates the command actor, then invokes the context-selected authorizer.