Skip to main content
Version: 12.x (Current)

Advanced Authorization Service Configuration

How to write authorization extension​

The file for this extension is /config-extension/authorization-service/auth.json.

This extension is merged with the automatically generated configuration, taking precedence.

Example configuration:

{
  "/my-path": {
    "GET": {
      "authorization": {
        "expression": "true",
        "public": true
      }
    }
  },
  "/other/path": {
    "ALL": {
      "backofficeAuthorization": {
        "expression": "groups.admin",
        "public": false
      }
    }
  }
}