Is your feature request related to a problem? Please describe.

Currently, callouts to external services are made from the auth service, specifically within the Authorize method in auth/service.go.

Problem:

• These callouts are constrained due to limited context available in the auth service.
• For example, callout service needs operation-specific context (e.g., create, update, add users, send invitation).
• In the future, additional callouts might require even more request details.

Describe the feature you are requesting, as well as the possible use case(s) for it.

Proposal:

• Move the callout logic from the auth service to pkg/authz.
• pkg/authz has access to richer context about the request, enabling it to send more complete information to external services.

Indicate the importance of this feature to you.

Must-have

Anything else?

Benefits:

• Centralizes and enriches the context for callouts.
• Allows flexible and extensible constraint checks.
• Decouples callout logic from the auth layer, making it easier to maintain and extend.