Does anyone know how to add an intercepter after the authentication feature? Need it for an custom Authorization feature

I made a custom authentication provider for that

Could you share an example?

thx

@Uriel Salischiker why not to use Sessions plus Authentication features to have cookie auth out-of-box:

install(Sessions) {
    cookie<CookieClass>("CookieName") {
        // configure cookie provider: path, httpOnly, secure and so on
    }
}

install(Authentication) {
    session<CookieClass>("AuthorizationName") {
        challenge {
            appendWWWAuthenticateHeader(call)
            call.respond(HttpStatusCode.Unauthorized)
        }
        validate {
            // it here points to you CookieClass - extract data and may be call db to find user 
        }
    }
}

Ohh, tgat works when the cookie is not a session cookie but contains a url encoded string which then contains a access token?

I don't sure I completely understood your question, but I don't see any restrictions to a content of cookie. When cookie provider is configured, you need to provide serialize/deserialize methods from/to CookieClass to/from String.

fun CookieSessionBuilder<CookieClass>.init() {
    ...
    serializer = object : SessionSerializer {
        override fun deserialize(text: String): Any = ...
        override fun serialize(session: Any): String = ...
    }
}