Expand description
Group-based access control plugin (acl).
Restricts which already-authenticated consumers may reach a route, keyed on
the consumer’s group. It does not authenticate — an upstream auth node
(e.g. key-auth) must have attached the consumer identity first, writing
consumer.name and (optionally) consumer.group into context.message.
This plugin then admits or blocks the request based on that group.
APISIX 3.17’s acl matches arbitrary consumer labels (allow_labels /
deny_labels, each a map of label→values). featherbit models a consumer’s
membership as a single consumer.group, so this port implements the
classic group-allowlist form: allowed_by / denied_by are lists of group
names. See the deviation note in the docs.
Structs§
- AclPlugin
- Admits or blocks requests based on the attached consumer’s group.