Question: resource protection with "any of" role requirements

[narerkrit-dotography]

Hello,

About resource protection, setting multiple roles in a resource means requiring all of the roles.

# requires both roles `foo` and `bar`
- uri: /xx/xx
  roles:
    - foo
    - bar

Is there any way to set the role requirement to be any of the roles? Either globally or resource specific?
i.e. having only role foo is enough to access the resource.

Thank you very much.

[gambol99]

hi @narerkrit-dotography ... at the moment it requires all roles specified .. https://github.com/gambol99/keycloak-proxy/blob/master/utils.go#L206 .. I guess we could add another option default to and but allowing those to override with a or operation

[gambol99]

fixed in #389

[gambol99]

gonna mark this a fixed for now, feel free to reopen to you hit an issue though

[narerkrit-dotography]

Thank you so much.