New Reject parameter to specify separate redirection URL in case of valid token but access denied

BTBurke / caddy-jwt

JWT middleware for the Caddy server

MIT License

113 stars 40 forks source link

New Reject parameter to specify separate redirection URL in case of valid token but access denied #44

Closed ghost closed 5 years ago

ghost commented 5 years ago

A proposal for an access denied redirect - distinct from the existing redirect parameter in that it will not be triggered by authentication failures (missing/invalid/expired token), but only authorization failures (unmatched claims).