OPA python client just gives the default value for the rule

[S1DDHEY]

I am trying to intialize OPA using the OPA python client by (https://github.com/Turall/OPA-python-client). I run the OPA server in the terminal and then I have made a simple Flask app that initializes the OPA and has an API endpoint for further tasks. But for some reason initializing OPA this way I am just getting the default value for the rule that I have declared in the rego file.

auth.rego

package auth

import future.keywords.in

default allow := false

# global check
allow if {
	input.user.role in system_wide_roles
}

# rebac check
allow if {
	input.action == "approve_leave"
	relationships[input.user.id][input.resource.id] == "manager_of"
}

allow if {
	input.action == "read"
	relationships[input.user.id][input.resource.id] == "owner_of"
}

# tenant check
allow if {
	input.user.tenant_id == input.resource.tenant_id
}

# rbac check
allow if {
	input.action in all_permissions
}

# ----- ReBAC Policy -----
relationships := {
	"alice": {"carol": "manager_of"},
	"bob": {"invoice123": "owner_of"},
}

# ----- RBAC Policy -----
all_permissions contains perm if {
	user_role := lower(input.user.role)

	permissions_for_role := data.roles[user_role].permissions[input.module][input.feature][input.entity]

	# Iterate through permissions
	some perm in permissions_for_role
}

# ----- Global Policy -----
system_wide_roles := {"super_admin"}

for now I am trying to test this for the RBAC policy.

app.py

import os
from flask import Flask, request, jsonify
from opa_client.opa import OpaClient
from pathlib import Path
import json

app = Flask(__name__)

ROOT_DIR = Path(__file__).parent.parent
OPA_POLICY_DIR = str(ROOT_DIR / "opa")
ROLES_CONFIG_PATH = str(ROOT_DIR / "opa" / "roles.json")

try:
    print(f"Initializing OPA client...")
    
    # Initialize the OPA client
    client = OpaClient(host="localhost", port=8181)
    
    print("OPA client initialized successfully.")
    
    # Load policies
    client.update_policy_from_file(filepath="../opa/auth.rego", endpoint="auth")

    # Load the roles.json data
    print(f"Loading roles data from: {ROLES_CONFIG_PATH}")
    with open(ROLES_CONFIG_PATH, 'r') as f:
        roles_data = json.load(f)
    client.update_or_create_data(roles_data, "roles")
    print("Roles data loaded into OPA client.")

except Exception as e:
    print(f"Error initializing OPA client or loading data: {e}")
    # We will let the app crash if initialization fails, as it's a critical error.
    raise


@app.route('/v1/data/auth/allow', methods=['POST'])
def get_decision():
    try:
        # Get the input from the request body
        input_data = request.get_json()
        if not input_data:
            return jsonify({"error": "Invalid JSON input"}), 400

        print(f"Received input for evaluation: {input_data}")

        # Evaluate the policy
        # The path corresponds to the rule we want to evaluate: data.auth.allow
        decision = client.query_rule(input_data=input_data, package_path="auth", rule_name="allow")
        
        print(f"OPA decision: {decision}")

        # Return the result from OPA
        return jsonify(decision.get('result', {}))

    except Exception as e:
        print(f"Error during OPA evaluation: {e}")
        return jsonify({"error": "Internal server error during policy evaluation"}), 500

if __name__ == '__main__':

    app.run(host='0.0.0.0', port=5001, debug=True)

I tried opa eval command for the same and it works as expected. I don't understand what possibly could be wrong with this.