Make the first test pass

src/HotChocolate/AspNetCore/src/AspNetCore.Authorization.Opa/DefaultOpaDecision.cs

@@ -0,0 +1,12 @@
+namespace HotChocolate.AspNetCore.Authorization;
+
+public class DefaultOpaDecision : IOpaDecision
+{
+    public AuthorizeResult Map(ResponseBase? response) => response switch
+    {
+        QueryResponse { Result: true } => AuthorizeResult.Allowed,
+        NoDefaultPolicy => AuthorizeResult.NoDefaultPolicy,
+        PolicyNotFound => AuthorizeResult.PolicyNotFound,
+        _ => AuthorizeResult.NotAllowed
+    };
+}

src/HotChocolate/AspNetCore/src/AspNetCore.Authorization.Opa/QueryRequestMapper.cs → src/HotChocolate/AspNetCore/src/AspNetCore.Authorization.Opa/DefaultQueryRequestFactory.cs

@@ -4,9 +4,9 @@
 
 namespace HotChocolate.AspNetCore.Authorization;
 
-public static class QueryRequestMapper
+public class DefaultQueryRequestFactory : IOpaQueryRequestFactory
 {
-    public static QueryRequest MapFrom(IMiddlewareContext context, AuthorizeDirective directive)
+    public QueryRequest CreateRequest(IMiddlewareContext context, AuthorizeDirective directive)
     {
         IHttpContextAccessor? accessor = context.Services.GetService<IHttpContextAccessor>();
         HttpContext? http = accessor.HttpContext;
@@ -16,9 +16,9 @@ public static QueryRequest MapFrom(IMiddlewareContext context, AuthorizeDirectiv
         {
             Input = new Input
             {
-                GraphQL = new GraphQl
+                Policy = new Policy
                 {
-                    Policy = directive.Policy ?? string.Empty,
+                    Path = directive.Policy ?? string.Empty,
                     Roles = directive.Roles is null ? Array.Empty<string>() : directive.Roles.ToArray()
                 },
                 Request = new OriginalRequest

src/HotChocolate/AspNetCore/src/AspNetCore.Authorization.Opa/HotChocolateAuthorizeRequestExecutorBuilder.cs

@@ -27,7 +27,8 @@ public static IRequestExecutorBuilder AddOpaAuthorizationHandler(
         this IRequestExecutorBuilder builder, Action<IConfiguration, OpaOptions>? configure = null)
     {
         builder.AddAuthorizationHandler<OpaAuthorizationHandler>();
-        builder.Services.AddSingleton<IOpaDecision, OpaDecision>();
+        builder.Services.AddSingleton<IOpaQueryRequestFactory, DefaultQueryRequestFactory>();
+        builder.Services.AddSingleton<IOpaDecision, DefaultOpaDecision>();
         builder.Services.AddHttpClient<IOpaService, OpaService>((f, c) =>
         {
             OpaOptions? options = f.GetRequiredService<OpaOptions>();

src/HotChocolate/AspNetCore/src/AspNetCore.Authorization.Opa/OpaAuthorizationHandler.cs

@@ -23,8 +23,9 @@ public async ValueTask<AuthorizeResult> AuthorizeAsync(
     {
         IOpaService? opaService = context.Services.GetRequiredService<IOpaService>();
         IOpaDecision? opaDecision = context.Services.GetRequiredService<IOpaDecision>();
+        IOpaQueryRequestFactory? factory = context.Services.GetRequiredService<IOpaQueryRequestFactory>();
 
-        QueryResponse? response = await opaService.QueryAsync(directive.Policy ?? string.Empty, QueryRequestMapper.MapFrom(context, directive), context.RequestAborted);
+        ResponseBase? response = await opaService.QueryAsync(directive.Policy ?? string.Empty, factory.CreateRequest(context, directive), context.RequestAborted);
         return opaDecision.Map(response);
     }
 }

src/HotChocolate/AspNetCore/src/AspNetCore.Authorization.Opa/OpaOptions.cs

@@ -1,10 +1,10 @@
-using System.Text.Json;
+using System.Text.Json;
 
 namespace HotChocolate.AspNetCore.Authorization;
 
 public sealed class OpaOptions
 {
-    public Uri BaseAddress { get; set; } = new Uri("http://127.0.0.1:8181");
+    public Uri BaseAddress { get; set; } = new("http://127.0.0.1:8181");
     public TimeSpan ConnectionTimeout { get; set; } = TimeSpan.FromMilliseconds(250);
-    public JsonSerializerOptions JsonSerializerOptions { get; set; } = new JsonSerializerOptions();
+    public JsonSerializerOptions JsonSerializerOptions { get; set; } = new();
 }

src/HotChocolate/AspNetCore/src/AspNetCore.Authorization.Opa/OpaService.cs

@@ -1,3 +1,5 @@
+using System.Net;
+
 namespace HotChocolate.AspNetCore.Authorization;
 
 public sealed class OpaService : IOpaService
@@ -11,13 +13,13 @@ public OpaService(HttpClient httpClient, OpaOptions options)
         _options = options ?? throw new ArgumentNullException(nameof(options));
     }
 
-    public async Task<QueryResponse?> QueryAsync(string policyPath, QueryRequest request, CancellationToken token)
+    public async Task<ResponseBase?> QueryAsync(string policyPath, QueryRequest request, CancellationToken token)
     {
         if (policyPath is null) throw new ArgumentNullException(nameof(policyPath));
         if (request is null) throw new ArgumentNullException(nameof(request));
 
-        HttpResponseMessage? response = await _httpClient.PostAsync(policyPath,  request.ToJsonContent(_options.JsonSerializerOptions), token);
-        response.EnsureSuccessStatusCode();
+        HttpResponseMessage response = await _httpClient.PostAsync(policyPath,  request.ToJsonContent(_options.JsonSerializerOptions), token);
+        if (policyPath.Equals(string.Empty) && response.StatusCode == HttpStatusCode.NotFound) return NoDefaultPolicy.Response;
         return await response.Content.QueryResponseFromJsonAsync(_options.JsonSerializerOptions, token);
     }
 }

src/HotChocolate/AspNetCore/src/AspNetCore.Authorization.Opa/Types/IOpaDecision.cs

@@ -1,6 +1,6 @@
-namespace HotChocolate.AspNetCore.Authorization;
+namespace HotChocolate.AspNetCore.Authorization;
 
 public interface IOpaDecision
 {
-    AuthorizeResult Map(QueryResponse? response);
+    AuthorizeResult Map(ResponseBase? response);
 }

src/HotChocolate/AspNetCore/src/AspNetCore.Authorization.Opa/Types/IOpaQueryRequestFactory.cs

@@ -0,0 +1,8 @@
+using HotChocolate.Resolvers;
+
+namespace HotChocolate.AspNetCore.Authorization;
+
+public interface IOpaQueryRequestFactory
+{
+    QueryRequest CreateRequest(IMiddlewareContext context, AuthorizeDirective directive);
+}

src/HotChocolate/AspNetCore/src/AspNetCore.Authorization.Opa/Types/IOpaService.cs

@@ -2,5 +2,5 @@ namespace HotChocolate.AspNetCore.Authorization;
 
 public interface IOpaService
 {
-    Task<QueryResponse?> QueryAsync(string policyPath, QueryRequest request, CancellationToken token);
+    Task<ResponseBase?> QueryAsync(string policyPath, QueryRequest request, CancellationToken token);
 }

src/HotChocolate/AspNetCore/src/AspNetCore.Authorization.Opa/Types/Input.cs

@@ -2,9 +2,10 @@ namespace HotChocolate.AspNetCore.Authorization;
 
 public sealed class Input
 {
-    public GraphQl GraphQL { get; set; } = new GraphQl();
+    public Policy Policy { get; set; } = new();
     public OriginalRequest Request { get; set; } = new();
     public IPAndPort Source { get; set; } = IPAndPort.Empty;
     public IPAndPort Destination { get; set; } = IPAndPort.Empty;
+    public object? Extensions { get; set; }
     public static readonly Input Empty = new();
 }

src/HotChocolate/AspNetCore/src/AspNetCore.Authorization.Opa/Types/GraphQl.cs → src/HotChocolate/AspNetCore/src/AspNetCore.Authorization.Opa/Types/Policy.cs

@@ -1,7 +1,7 @@
 namespace HotChocolate.AspNetCore.Authorization;
 
-public sealed class GraphQl
+public sealed class Policy
 {
-    public string Policy { get; set; } = string.Empty;
+    public string Path { get; set; } = string.Empty;
     public string[] Roles { get; set; } = Array.Empty<string>();
 }

src/HotChocolate/AspNetCore/src/AspNetCore.Authorization.Opa/Types/QueryResponse.cs

@@ -1,7 +1,22 @@
-namespace HotChocolate.AspNetCore.Authorization;
+namespace HotChocolate.AspNetCore.Authorization;
 
-public sealed class QueryResponse
+public abstract class ResponseBase { }
+
+public sealed class QueryResponse : ResponseBase
 {
     public Guid? DecisionId { get; set; }
     public bool Result { get; set; }
 }
+
+public sealed class PolicyNotFound : ResponseBase
+{
+    private PolicyNotFound() {}
+    public static readonly PolicyNotFound Response = new();
+}
+
+
+public sealed class NoDefaultPolicy : ResponseBase
+{
+    private NoDefaultPolicy() { }
+    public static readonly NoDefaultPolicy Response = new();
+}