How OIDC and OPA Affect Request Processing

The authorization checks for a request that comes in to Chronicle's API follow this flow:

Sub-flows referenced in the above are for verifying JSON Web Tokens,

and for obtaining information on the requesting user,