Skip to main content

OperationAuthorizer

@webda/core


Type Alias: OperationAuthorizer

OperationAuthorizer = (context, operationId, operation, options) => Promise<true | string | false>

Defined in: packages/core/src/core/operations.ts:92

An awaited check run on every operation call, after input validation and before Webda.BeforeOperation

Return true to allow; anything else refuses (the reason is logged, never sent to the client). Throwing a WebdaError.HttpError propagates it; any other error is a refusal.

In probe mode (probe: true, input undefined) the question is "could the caller call the operation with some input?", used to list operations.

Parameters​

context​

OperationContext

operationId​

string

operation​

OperationDefinition

options​

input?​

any

probe​

boolean

Returns​

Promise<true | string | false>