Expand description
Per-route authorization of an authenticated caller.
Every user-facing handler starts with AuthorizeExt::require: an API key
must hold the route’s ApiKeyScope (or admin), and admin-only routes
also need an admin user behind the session or the key. JWT sessions are
not scope-checked, only the admin flag applies to them.
Traits§
- Authorize
Ext - Scope and admin checks on an
Authenticatedcaller.