schema.lua

local typedefs = require "kong.db.schema.typedefs"

return {
    name = "jwt-auth-rbac",
    fields = {{
        -- this plugin will only be applied to services or routes
        consumer = typedefs.no_consumer
    }, {
        -- this plugin will only run within nginx http module
        protocols = typedefs.protocols_http
    }, {
        config = {
            type = "record",
            fields = {{
                roles = {
                    type = "array",
                    elements = {
                        type = "string"
                    }
                }
            }, {
                roles_claim_name = {
                    type = "string",
                    default = "roles"
                }
            }, {
                msg_error_any = {
                    type = "string",
                    default = "To be able to use this service you must have at least one of the roles configured"
                }
            }, {
                msg_error_all = {
                    type = "string",
                    default = "In order to use this service you must match all the roles configured with the associated ones in the JWT token"
                }
            }, {
                msg_error_not_roles_claimed = {
                    type = "string",
                    default = "The claim roles are not informed in the JWT token"
                }
            }, {
                policy = {
                    type = "string",
                    default = "any",
                    one_of = {"any", "all"}
                }
            }}
        }
    }},
    entity_checks = {{
        at_least_one_of = {"config.roles"}
    }}
}