Couper Documentation


Access Control

The configuration of access controls is twofold in Couper: You define the particular type such as jwt or basic_auth in definitions, each with a distinct label (must not be one of the reserved names: granted_permissions, required_permission).

Anywhere in the server block those labels can be used in the access_control list to protect the respective block.

📝 Access permissions are inherited by nested blocks.

You can also disable access control for blocks with disable_access_control: With disable_access_control = ["bar"], the access_control named bar will be disabled for the corresponding block context.

All access controls have an option to handle related errors.