Skip to content

Logical AND #940

Description

@xaoo

Hi there!

Are the any plans to support Logical AND for OAuth2 authentication security schemes?
Based on this documentation it seems that ESPv2 support security requirement conjunctions (logical AND) for API key and OAuth2 authentication, but not for two Oauth2.

Is there any way to enforce ESPv2 to validate a firestore token and a app check token?

Err I get:

kind: ERROR message: "security section contains multiple security definitions \'firebase_app_check,firebase\' within the scope (Security Requirement Object) that get logically ANDed (both requirements need to be satisfied to allow the request). We only support allowing logical OR between security definitions. Therefore, please write requirements in different objects inside the array (which would mean logical OR, that is, any of the requirement should be sufficient to allow the request.)"

Thank you

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions