AuthzRestClient.php
Table of Contents
Classes
- AuthzRestClient
- REST authorization transport (FND-04, CONTRACT.md §1): `checkAccess()`/`can()`/
`batchCheck()` over `POST /api/v1/authz/check[/batch]` — the ALWAYS-available authz
path (D-03). Reuses the caller-supplied Guzzle client (the same instance
{@see \Axiam\Sdk\Session} wires with {@see AuthMiddleware}/{@see RefreshMiddleware} on
its `HandlerStack`), so `Authorization`/`X-Tenant-ID`/`X-CSRF-Token` header injection
and the single-flight refresh-on-401 behavior (D-06) apply to authz calls exactly as
they do to every other REST call — this class never re-implements any of that.