Class AuthorizationPolicy

constructor

• new AuthorizationPolicy(
      config?: {
          default: "allow" | "deny";
          rules: {
              allow: string[];
              clientIds?: string[];
              deny: string[];
              id: string;
              principals?: string[];
              scopes?: string[];
          }[];
      },
  ): AuthorizationPolicy

  Parameters

  • Optionalconfig: {
        default: "allow" | "deny";
        rules: {
            allow: string[];
            clientIds?: string[];
            deny: string[];
            id: string;
            principals?: string[];
            scopes?: string[];
        }[];
    }

    authorization configuration; undefined allows every operation for every authenticated principal ("implicit-allow-all")

  Returns AuthorizationPolicy

Readonlyimplicit

decide

• decide(p: Principal, op: OperationBinding): Decision

  Decide whether a principal may invoke an operation.

  Parameters

  • p: Principal

    principal

  • op: OperationBinding

    operation binding

  Returns Decision

  decision