ConfigurationURL copied

RBAC Configuration (optional)URL copied

Use rbac to protect specific paths by role. This is ignored unless an auth provider is enabled.

[rbac]
enabled = true
default_roles = ["reader"]
user_roles = { "alice@example.com" = ["admin"], "bob" = ["editor"] }
role_users = { "admin" = ["alice@example.com"], "editor" = ["bob"] }

[[rbac.rules]]
pattern = "^/admin"
roles = ["admin"]

[[rbac.rules]]
pattern = "^/private"
roles = ["admin", "editor"]

Environment variable (optional):

• VYASA_RBAC_ENABLED: Force enable/disable RBAC

Notes:

• If both user_roles and role_users are provided, roles are unioned at runtime.
• Google OAuth requires the optional dependency vyasa[auth].