Aserto · JSON-LD Context

Aserto Context

JSON-LD context defining the semantic vocabulary for Aserto from Aserto.

52 Classes 3 Properties 4 Namespaces
View Context View on GitHub

Namespaces

schema: https://schema.org/
aserto: https://www.aserto.com/vocab#
opa: https://www.openpolicyagent.org/vocab#
xsd: http://www.w3.org/2001/XMLSchema#

Classes

name description url identifier AuthorizationService DirectoryService DecisionLogsService IdentityContext identity identityType PolicyContext policyPath policyDecisions PolicyInstance policyName instanceLabel ResourceContext Decision decisionName decisionResult DirectoryObject objectType objectId displayName properties etag Relation subjectType subjectId relation Permission permissionName ObjectType RelationType DecisionLog DecisionEntry logName logSize logUrl policyPackage regoQuery ReBAC zanzibarModel checkResult traceInfo APIEndpoint httpMethod urlTemplate isOperation queryOperation decisionTreeOperation compileOperation

Properties

Property Type Container
dateCreated dateTime
dateModified dateTime
Policy reference

JSON-LD Document

Raw ↑
{
  "@context": {
    "@version": 1.1,
    "schema": "https://schema.org/",
    "aserto": "https://www.aserto.com/vocab#",
    "opa": "https://www.openpolicyagent.org/vocab#",
    "xsd": "http://www.w3.org/2001/XMLSchema#",

    "name": "schema:name",
    "description": "schema:description",
    "url": "schema:url",
    "identifier": "schema:identifier",
    "dateCreated": {
      "@id": "schema:dateCreated",
      "@type": "xsd:dateTime"
    },
    "dateModified": {
      "@id": "schema:dateModified",
      "@type": "xsd:dateTime"
    },

    "AuthorizationService": "aserto:AuthorizationService",
    "DirectoryService": "aserto:DirectoryService",
    "DecisionLogsService": "aserto:DecisionLogsService",

    "IdentityContext": "aserto:IdentityContext",
    "identity": "aserto:identity",
    "identityType": "aserto:identityType",

    "PolicyContext": "aserto:PolicyContext",
    "policyPath": "aserto:policyPath",
    "policyDecisions": "aserto:policyDecisions",

    "PolicyInstance": "aserto:PolicyInstance",
    "policyName": "aserto:policyName",
    "instanceLabel": "aserto:instanceLabel",

    "ResourceContext": "aserto:ResourceContext",

    "Decision": "aserto:Decision",
    "decisionName": "aserto:decisionName",
    "decisionResult": "aserto:decisionResult",

    "DirectoryObject": "aserto:DirectoryObject",
    "objectType": "aserto:objectType",
    "objectId": "aserto:objectId",
    "displayName": "aserto:displayName",
    "properties": "aserto:properties",
    "etag": "aserto:etag",

    "Relation": "aserto:Relation",
    "subjectType": "aserto:subjectType",
    "subjectId": "aserto:subjectId",
    "relation": "aserto:relation",

    "Permission": "aserto:Permission",
    "permissionName": "aserto:permissionName",

    "ObjectType": "aserto:ObjectType",
    "RelationType": "aserto:RelationType",

    "DecisionLog": "aserto:DecisionLog",
    "DecisionEntry": "aserto:DecisionEntry",
    "logName": "aserto:logName",
    "logSize": "aserto:logSize",
    "logUrl": "aserto:logUrl",

    "Policy": {
      "@id": "opa:Policy",
      "@type": "@id"
    },
    "policyPackage": "opa:policyPackage",
    "regoQuery": "opa:regoQuery",

    "ReBAC": "aserto:ReBAC",
    "zanzibarModel": "aserto:zanzibarModel",
    "checkResult": "aserto:checkResult",
    "traceInfo": "aserto:traceInfo",

    "APIEndpoint": "schema:EntryPoint",
    "httpMethod": "schema:httpMethod",
    "urlTemplate": "schema:urlTemplate",

    "isOperation": "aserto:isOperation",
    "queryOperation": "aserto:queryOperation",
    "decisionTreeOperation": "aserto:decisionTreeOperation",
    "compileOperation": "aserto:compileOperation"
  },

  "@graph": [
    {
      "@id": "aserto:AuthorizationService",
      "@type": "schema:WebAPI",
      "name": "Aserto Authorizer API",
      "description": "Real-time authorization decision engine powered by Open Policy Agent. Evaluates Rego policies against identity, resource, and policy context.",
      "url": "https://authorizer.prod.aserto.com",
      "schema:documentation": "https://docs.aserto.com/docs/authorizer-guide/overview",
      "schema:provider": {
        "@type": "schema:Organization",
        "name": "Aserto",
        "url": "https://www.aserto.com"
      }
    },
    {
      "@id": "aserto:DirectoryService",
      "@type": "schema:WebAPI",
      "name": "Aserto Directory API",
      "description": "Google Zanzibar-inspired relationship-based access control (ReBAC) directory for managing users, groups, objects, relations, and permissions.",
      "url": "https://directory.prod.aserto.com",
      "schema:documentation": "https://docs.aserto.com/docs/api-reference"
    },
    {
      "@id": "aserto:DecisionLogsService",
      "@type": "schema:WebAPI",
      "name": "Aserto Decision Logs API",
      "description": "Audit trail of authorization decisions made by connected Authorizer instances, supporting compliance and analytics use cases.",
      "url": "https://console.aserto.com",
      "schema:documentation": "https://docs.aserto.com/docs/api-reference"
    },
    {
      "@id": "aserto:isOperation",
      "@type": "schema:EntryPoint",
      "name": "Is (Authorization Check)",
      "description": "POST /api/v2/authz/is — Evaluate policy decisions for a given identity and resource context.",
      "httpMethod": "POST",
      "urlTemplate": "https://authorizer.prod.aserto.com/api/v2/authz/is",
      "schema:encodingType": "application/json"
    },
    {
      "@id": "aserto:queryOperation",
      "@type": "schema:EntryPoint",
      "name": "Query (OPA Query)",
      "description": "POST /api/v2/authz/query — Execute an arbitrary Rego query against the loaded policy.",
      "httpMethod": "POST",
      "urlTemplate": "https://authorizer.prod.aserto.com/api/v2/authz/query"
    },
    {
      "@id": "aserto:decisionTreeOperation",
      "@type": "schema:EntryPoint",
      "name": "Decision Tree",
      "description": "POST /api/v2/authz/decisiontree — Return decision values for all policy paths for a given identity.",
      "httpMethod": "POST",
      "urlTemplate": "https://authorizer.prod.aserto.com/api/v2/authz/decisiontree"
    },
    {
      "@id": "aserto:compileOperation",
      "@type": "schema:EntryPoint",
      "name": "Compile (Partial Evaluation)",
      "description": "POST /api/v2/authz/compile — Compile a Rego query to partial evaluation conditions for query filtering.",
      "httpMethod": "POST",
      "urlTemplate": "https://authorizer.prod.aserto.com/api/v2/authz/compile"
    }
  ]
}