Attributes
Table of Contents
Classes
- RequireAccess
- Declarative per-endpoint authorization requirement (CONTRACT.md §11, canonical
`require_access(action, resource[, scope])`). Placing this attribute on a controller
method or class does not itself perform any check — it is metadata read by the
framework-specific enforcement listener
({@see \Axiam\Sdk\Symfony\AxiamAccessAttributeListener},
{@see \Axiam\Sdk\Laravel\AxiamAccessMiddleware}), which resolves the target resource
and delegates the actual authorization decision to
{@see \Axiam\Sdk\AccessEnforcer::enforceAccess()}.
- RequireAuth
- Declarative "endpoint requires an authenticated AXIAM identity" marker (CONTRACT.md
§11, canonical `require_auth`). Pure sugar over the CONTRACT.md §10 authentication
guard for frameworks (Laravel, Symfony) where that guard is applied per-route rather
than globally: placing this attribute on a controller method or class does not itself
perform any verification — it is read by the framework-specific enforcement listener
({@see \Axiam\Sdk\Symfony\AxiamAccessAttributeListener},
{@see \Axiam\Sdk\Laravel\AxiamAccessMiddleware}) which delegates the actual check to
{@see \Axiam\Sdk\AccessEnforcer::enforceAuth()}.
- RequireRole
- Declarative local role check (CONTRACT.md §11, canonical `require_role(role...)`,
MAY-level helper). Placing this attribute on a controller method or class does not
itself perform any check — it is metadata read by the framework-specific enforcement
listener ({@see \Axiam\Sdk\Symfony\AxiamAccessAttributeListener},
{@see \Axiam\Sdk\Laravel\AxiamAccessMiddleware}), which delegates to
{@see \Axiam\Sdk\AccessEnforcer::enforceRole()}.