Refactor core kernel and infrastructure to support true microservices architecture where services are independently deployable. Phase 1: Core Kernel Cleanup - Remove database provider from CoreModule (services create their own) - Update ProvideHealthRegistry to not depend on database - Add schema support to database client (NewClientWithSchema) - Update main entry point to remove database dependency - Core kernel now provides only: config, logger, error bus, health, metrics, tracer, service registry Phase 2: Service Registry Implementation - Create ServiceRegistry interface (pkg/registry/registry.go) - Implement Consul registry (internal/registry/consul/consul.go) - Add Consul dependency (github.com/hashicorp/consul/api) - Add registry configuration to config/default.yaml - Add ProvideServiceRegistry() to DI container Phase 3: Service Client Interfaces - Create service client interfaces: - pkg/services/auth.go - AuthServiceClient - pkg/services/identity.go - IdentityServiceClient - pkg/services/authz.go - AuthzServiceClient - pkg/services/audit.go - AuditServiceClient - Create ServiceClientFactory (internal/client/factory.go) - Create stub gRPC client implementations (internal/client/grpc/) - Add ProvideServiceClientFactory() to DI container Phase 4: gRPC Service Definitions - Create proto files for all core services: - api/proto/auth.proto - api/proto/identity.proto - api/proto/authz.proto - api/proto/audit.proto - Add generate-proto target to Makefile Phase 5: API Gateway Implementation - Create API Gateway service entry point (cmd/api-gateway/main.go) - Create Gateway implementation (services/gateway/gateway.go) - Add gateway configuration to config/default.yaml - Gateway registers with Consul and routes requests to backend services All code compiles successfully. Core services (Auth, Identity, Authz, Audit) will be implemented in Epic 2 using these foundations.
38 lines
1.2 KiB
Go
38 lines
1.2 KiB
Go
// Package services provides service client interfaces for inter-service communication.
|
|
package services
|
|
|
|
import (
|
|
"context"
|
|
)
|
|
|
|
// AuthzServiceClient is the interface for communicating with the Authz Service.
|
|
type AuthzServiceClient interface {
|
|
// Authorize checks if a user has a specific permission and returns an error if not.
|
|
Authorize(ctx context.Context, userID, permission string) error
|
|
|
|
// HasPermission checks if a user has a specific permission.
|
|
HasPermission(ctx context.Context, userID, permission string) (bool, error)
|
|
|
|
// GetUserPermissions returns all permissions for a user.
|
|
GetUserPermissions(ctx context.Context, userID string) ([]Permission, error)
|
|
|
|
// GetUserRoles returns all roles for a user.
|
|
GetUserRoles(ctx context.Context, userID string) ([]Role, error)
|
|
}
|
|
|
|
// Permission represents a permission in the system.
|
|
type Permission struct {
|
|
ID string `json:"id"`
|
|
Code string `json:"code"`
|
|
Name string `json:"name"`
|
|
Description string `json:"description"`
|
|
}
|
|
|
|
// Role represents a role in the system.
|
|
type Role struct {
|
|
ID string `json:"id"`
|
|
Name string `json:"name"`
|
|
Description string `json:"description"`
|
|
Permissions []string `json:"permissions"` // Permission codes
|
|
}
|