claimIncludes | express-openid-connect (original) (raw)

Use this MW to protect a route, checking that all values are in a claim.

const { claimIncludes } = require('express-openid-connect');

app.get('/admin/delete', claimIncludes('roles', 'admin', 'superadmin'), (req, res) => {
  res.send(...);
});