Implementation of an authorization (authz) server

[sh1myama]

Description

Implement an Authorization Server function that performs authorization decisions for requested actions and resources. It accepts an access token provided in the Authorization header as the credential, validates the token using preloaded JWKs and policy data, evaluates authorization for the requested action and resource, and returns the decision in the response.

Assignees

• Assignees is set

Type of changes

• Apply one or more labels of the following that fits:
  • bug: Bug fix
  • dependencies: Dependency upgrades
  • documentation: Documentation changes
  • enhancement: New Feature
  • good first issue: First contribution
  • logging: Log changes
  • refactor: Refactoring (no functional changes, no api changes)

Flags

- [ ] Breaks backward compatibility
- [ ] Requires a documentation update
- [ ] Has untestable code

---

Checklist

- [ ] Followed the guidelines in the CONTRIBUTING document
- [ ] Added prefix `[skip ci]`/`[ci skip]`/`[no ci]`/`[skip actions]`/`[actions skip]` in the PR title if necessary
- [ ] Tested and linted the code
- [ ] Commented the code
- [ ] Made corresponding changes to the documentation

Checklist for maintainer

- [ ] Use `Squash and merge`
- [ ] Double-confirm the merge message has prefix `[skip ci]`/`[ci skip]`/`[no ci]`/`[skip actions]`/`[actions skip]`
- [ ] Delete the branch after merge