jis260
commented
3 years ago I took a look at apimPolicyBuilder.js and I see that it does reference "requiredClaims".
I successfully set an required claim at the All Operations level with:
I could not find this in the reference YAML template at: https://github.com/serverless/serverless-azure-functions/blob/master/docs/examples/apim.md
Multiple values can be specified like:
I tried setting jwtValidate at the function level, but this does not set a policy.
Feature Proposal - setting jwtValidate claims as part of the serverless.yml
I've searched for whether this has been implemented or requested and I could not find anything.
Description
What is the use case that should be solved. The more detail you describe this in the easier it is to understand for us. -- As part of the apim: > apis: > jwtValidate: it does not appear to be possible to set claims? It would be useful to be able to set this for a API and given API operation. -- This would then mean that a JWT token check of the audience and issuers is performed for all operations. But individual operations could check for specific claims?
If there is additional config how would it look -- I would expect to set this in jwtValidate: for the API and it set:
-- I think it may also be important to be able to set claims as part of the apim: settings at the function level? I.e. be able to specify that a claim named with value is present for that specific API operation.
