npm package
OpenID AuthZEN 1.0 policy decision points · Beta
AuthZEN input adapter (Node SDK)
Carry an enterprise policy decision point's OpenID AuthZEN 1.0 answer into a Decionis evaluation as a material signal: the PDP decides access, Decionis decides whether this exact execution has authority, and the answer travels inside the signed inputs snapshot.
Install
How to get it
Every channel below resolves today — statuses never claim more availability than their channels prove.
What it governs
Actions intercepted before they execute
Governed actions
- · any evaluate decision request
- · payment.release (starter bundle)
Capabilities
- · upstream authorization signal
- · authzen 1 0 evaluation
- · allow listed discovery
- · signed decision dossier
Failure posture
When Decionis can't be reached
What this connector does with the action when it cannot get a decision, as the code does it today.
Custom
AuthZEN feeds Decionis a signal; it is not a gate. If Decionis is down, the SDK call it feeds decides, strict by default. If your PDP is down, no signal is sent and your policy's rule for a missing signal applies; the starter policy holds the action for review.
- Change it:
- required_signals and on_failure in your policy, and the PDP timeout (five seconds by default).
Failing to reach Decionis is never an authorization. No execution grant is issued without an evaluation, and an action that continues without one is ungoverned, never approved. Every surface's row
Start in shadow mode
Every connector starts read-only: watch what would have been held on your own traffic before any enforcement decision, with a signed Decision Dossier per evaluation.
Documentation