Check group membership

Overview

The Check Group Membership filter checks whether the specified API Gateway user is a member of the specified API Gateway user group. The user and the group are both stored in the API Gateway user store. For more details, see Manage API Gateway users.

Configuration

Configure the following required fields:

Name:

Enter an appropriate name for this filter.

User:

Enter the user name configured in the API Gateway user store. You can specify this value as a string or as a selector that expands to the value of the specified message attribute at runtime. Defaults to ${authentication.subject.id}.

Group:

Enter the group name configured in the API Gateway user store (for example, engineering or sales). You can specify this value as a string or as selector that expands to the value of the specified message attribute at runtime (for example, ${groupName}).

[Note] Note

The message attribute specified in the selector must exist on the message whiteboard prior to calling the filter. For more details on selectors, see Select configuration values at runtime.

Possible paths

The possible paths through this filter are as follows:

Outcome Description
True The specified user is a member of the specified group.
False The specified user is not a member of the specified group.
CircuitAbort An exception occurred while executing the filter.