-
Notifications
You must be signed in to change notification settings - Fork 1.7k
Open
Labels
AuthorizationOcelot feature: AuthorizationOcelot feature: AuthorizationConfigurationOcelot feature: ConfigurationOcelot feature: ConfigurationSummer'25Summer 2025 releaseSummer 2025 releaseacceptedBug or feature would be accepted as a PR or is being worked onBug or feature would be accepted as a PR or is being worked onfeatureA new featureA new featurehighHigh priorityHigh priority
Milestone
Description
New Feature
Allow claims to have an array value and not just a string value.
Motivation for New Feature
I have an application where I have multiple roles for my users. For endpoints that should only be reached by admins, I can use the following:
"RouteClaimsRequirement": {
"Role": "Admin"
}
For endpoints that should only be reached by users, I can use the following:
"RouteClaimsRequirement": {
"Role": "User"
}
For endpoints that should be reached by both users and admins I would like to use the following:
"RouteClaimsRequirement": {
"Role": ["User", "Admin"]
}
When I tried adding this, all requests to the endpoint respond with a 404.
This should let the request go through if the request has a claim for the role user or admin. This is equivalent to the built-in asp .net core attribute:
[Authorize(Roles = "User, Admin")]
mmigala, feugen24, Kethet, yuft, andyevans2000 and 11 more
Metadata
Metadata
Assignees
Labels
AuthorizationOcelot feature: AuthorizationOcelot feature: AuthorizationConfigurationOcelot feature: ConfigurationOcelot feature: ConfigurationSummer'25Summer 2025 releaseSummer 2025 releaseacceptedBug or feature would be accepted as a PR or is being worked onBug or feature would be accepted as a PR or is being worked onfeatureA new featureA new featurehighHigh priorityHigh priority