Hi, I try to setup a role based authorization and ...

# ktor

[Alper Tekin]

Hi, I try to setup a role based authorization and I’d like to hear your comments and suggestions 🙏

I have mini apps in my app and users have roles and access limit for each one according to their subscription. I use firebase for authentication.

1. Planned to keep the rules in token custom claims but it’s also limited to 1000 characters. Let’s say I need to check; memberId, roleId, organizationId etc. (Firebase)
2. I found a way to check roles on the route level with a custom “AuthorizationFeature” but it doesn’t work for me as I need to check some ids besides the roles but can’t do it before receiving the http requests. (Ktor)