File tree Expand file tree Collapse file tree 1 file changed +8
-3
lines changed Expand file tree Collapse file tree 1 file changed +8
-3
lines changed Original file line number Diff line number Diff line change @@ -24,8 +24,13 @@ OAuth2TokenVerify [ introspect | jwk_uri | metadata | jwk | plain | base64 | bas
24
24
"~*^Bearer\s+(?<token>[\S]+)$" $token;
25
25
}
26
26
27
- map $pfc_introspect_sub $valid_sub_joe {
28
- "joe" 1;
27
+ map $pfc_introspect_sub $valid_sub {
28
+ "joe" 1;
29
+ "alice" 1;
30
+ "bob" 1;
31
+ "~admin_.+" 1; #allow
32
+ "~student_.+" 0; # deny
33
+ default 0; # default to deny
29
34
}
30
35
31
36
server {
@@ -45,7 +50,7 @@ OAuth2TokenVerify [ introspect | jwk_uri | metadata | jwk | plain | base64 | bas
45
50
OAuth2Claim username $pfc_introspect_username;
46
51
OAuth2Claim active $pfc_introspect_active;
47
52
48
- OAuth2Require $valid_sub_joe ;
53
+ OAuth2Require $valid_sub ;
49
54
50
55
proxy_set_header OAUTH2_CLAIM_sub $pfc_introspect_sub;
51
56
proxy_set_header OAUTH2_CLAIM_username $pfc_introspect_username;
You can’t perform that action at this time.
0 commit comments