Method callAIAPI

ai_api.go:147–221

callAIAPI calls the configured AI API to get an explanation.

(explainContext string)

// callAIAPI calls the configured AI API to get an explanation.
func (e *Enforcer) callAIAPI(explainContext string) (string, error) {
	// Prepare the request
	messages := []aiMessage{
		{
			Role: "system",
			Content: "You are an expert in access control and authorization systems. " +
				"Explain why an authorization request was allowed or denied based on the " +
				"provided access control model, policies, and enforcement result. " +
				"Be clear, concise, and educational.",
		},
		{
			Role:    "user",
			Content: fmt.Sprintf("Please explain the following authorization decision:\n\n%s", explainContext),
		},
	}

	reqBody := aiChatRequest{
		Model:    e.aiConfig.Model,
		Messages: messages,
	}

	jsonData, err := json.Marshal(reqBody)
	if err != nil {
		return "", fmt.Errorf("failed to marshal request: %w", err)
	}

	// Create HTTP request with context
	reqCtx, cancel := context.WithTimeout(context.Background(), e.aiConfig.Timeout)
	defer cancel()

	req, err := http.NewRequestWithContext(reqCtx, http.MethodPost, e.aiConfig.Endpoint, bytes.NewBuffer(jsonData))
	if err != nil {
		return "", fmt.Errorf("failed to create request: %w", err)
	}

	req.Header.Set("Content-Type", "application/json")
	req.Header.Set("Authorization", "Bearer "+e.aiConfig.APIKey)

	// Execute request
	client := &http.Client{}

	resp, err := client.Do(req)
	if err != nil {
		return "", fmt.Errorf("failed to execute request: %w", err)
	}
	defer resp.Body.Close()

	// Read response
	body, err := io.ReadAll(resp.Body)
	if err != nil {
		return "", fmt.Errorf("failed to read response: %w", err)
	}

	// Parse response
	var chatResp aiChatResponse
	if err := json.Unmarshal(body, &chatResp); err != nil {
		return "", fmt.Errorf("failed to parse response: %w", err)
	}