Optional extraExtra corresponds to the user.Info.GetExtra() method from the authenticator. Since that is input to the authorizer it needs a reflection here.
Optional groupsGroups is the groups you're testing for.
Optional nonOptional resourceOptional uidUID information about the requesting user.
Optional userUser is the user you're testing for. If you specify "User" but not "Groups", then is it interpreted as "What if User were not a member of any groups
Static attributeStatic discriminatorStatic getGenerated using TypeDoc
SubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set