pub fn is_authorized(ctx: &ReqCtx, allowed_roles: &[String]) -> bool
True if the principal in ctx holds at least one of allowed_roles and has cleared MFA. Always true when auth is not configured.
ctx
allowed_roles