accounts

This repository includes a go service called accounts that using embedded OPA for policy decisions.

Download & Run

• Clone the repo sources and run the service using Go CLI:

git clone https://github.com/ronenl1/accounts.git

Run the following command from the root of the repo:

go run ./cmd/main.go

When the service is ready to accept requests you will see: "OPA engine is up!"

The service uses data.json as the source of truth, if you want to add more accounts just edit this file and restart the service.

The service will listen on port :7777 in /accounts/{id}. You will get response only from account IDs that specified in data.json.

The policies will allow users to access their own account ID or any user with costumer-service role only to the accounts in his region.

Example for authorized request:

curl -H username:alice -H region:EU -H roles:customer-service http://localhost:7777/accounts/2

Example for unauthorized request:

curl -H username:bob -H region:US http://localhost:7777/accounts/3