HTTP AuthZ Policy Middleware

Identifiers

method	HTTP method (GET, POST, ...)
path	Request path
host	Request host

Operators

==	Equal (string)
!=	Not equal (string)
startsWith	String prefix match
endsWith	String suffix match
matches	Regex match
contains	List contains string
AND	Logical AND
OR	Logical OR
NOT	Logical NOT

Functions

header(name)	First header value (string)
headerValues(name)	All header values ([]string)
headerList(name)	Comma-split header ([]string)
contains(list, item)	List contains item (bool)
anyOf(list, items...)	List has any of items (bool)
allOf(list, items...)	List has all items (bool)
matches(str, regex)	Regex match (bool)

Examples

method == "GET" AND path startsWith "/api"

contains(headerList("X-Teams"), "platform-eng")

anyOf(headerList("X-Roles"), "admin", "editor")

matches(path, "^/api/v[0-9]+/.*")