-
Notifications
You must be signed in to change notification settings - Fork 1.7k
Closed as not planned
Labels
AuthorizationOcelot feature: AuthorizationOcelot feature: AuthorizationConfigurationOcelot feature: ConfigurationOcelot feature: ConfigurationWinter'26Winter 2026 releaseWinter 2026 releasefeatureA new featureA new feature
Milestone
Description
New Feature
Allow claims to have an array value and not just a string value.
Motivation for New Feature
I have an application where I have multiple roles for my users. For endpoints that should only be reached by admins, I can use the following:
"RouteClaimsRequirement": {
"Role": "Admin"
}
For endpoints that should only be reached by users, I can use the following:
"RouteClaimsRequirement": {
"Role": "User"
}
For endpoints that should be reached by both users and admins I would like to use the following:
"RouteClaimsRequirement": {
"Role": ["User", "Admin"]
}
When I tried adding this, all requests to the endpoint respond with a 404.
This should let the request go through if the request has a claim for the role user or admin. This is equivalent to the built-in asp .net core attribute:
[Authorize(Roles = "User, Admin")]
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
AuthorizationOcelot feature: AuthorizationOcelot feature: AuthorizationConfigurationOcelot feature: ConfigurationOcelot feature: ConfigurationWinter'26Winter 2026 releaseWinter 2026 releasefeatureA new featureA new feature