Auth Rule checks if value exists in array

[aman-bansal]

Hi @tommo, Role matching with array is not possible at this moment. You can find some helpful posts here:

Auth directive rule compare against Boolean

having a valid JWT with the following data: { "IS_ALLOWED_ACCESS": true } How can I compare this in auth rules? I have tried: { rule: "{$IS_ALLOWED_ACCESS: true}"} { rule: "{$IS_ALLOWED_ACCESS: { eq: true }}"} { rule: "{$IS_ALLOWED_ACCESS: { eq: \"true\" }}"} The last one validates but it doesn’t seem to equate out to satisfy the rule. In the docs it is done like: Ensuring that requests are from an authenticated JWT, and no further restrictions, can be done by arranging the JWT to contai…

How to write @auth incase of user role claim in JWT has a array format

Hi there, I have the following schema in dgraph type Todo { id: ID! text: String! @search(by: [term]) owner: String! } I wanted to implement Role-Based Access control (RBAC) using the JWT token. My sample JWT token with role looks like below { "http://abc.xyz.com//roles": [ "admin", "superadmin" ], "nickname": "abc", "name": "abc@gmail.com", "picture": "", "updated_at": "2020-09-08T12:59:14.801Z", "email": "abc@gmail.com", "email_verified": false, "iss"…

In short, role matching right now is basic string match. So you have to convert your role array into single string values.