{"action":"opened","issue":{"url":"https://api.github.com/repos/ThreeMammals/Ocelot/issues/436","repository_url":"https://api.github.com/repos/ThreeMammals/Ocelot","labels_url":"https://api.github.com/repos/ThreeMammals/Ocelot/issues/436/labels{/name}","comments_url":"https://api.github.com/repos/ThreeMammals/Ocelot/issues/436/comments","events_url":"https://api.github.com/repos/ThreeMammals/Ocelot/issues/436/events","html_url":"https://github.com/ThreeMammals/Ocelot/issues/436","id":335867789,"node_id":"MDU6SXNzdWUzMzU4Njc3ODk=","number":436,"title":"[Question] Authorization with external IdentityServer","user":{"login":"aamuz","id":12134634,"node_id":"MDQ6VXNlcjEyMTM0NjM0","avatar_url":"https://avatars3.githubusercontent.com/u/12134634?v=4","gravatar_id":"","url":"https://api.github.com/users/aamuz","html_url":"https://github.com/aamuz","followers_url":"https://api.github.com/users/aamuz/followers","following_url":"https://api.github.com/users/aamuz/following{/other_user}","gists_url":"https://api.github.com/users/aamuz/gists{/gist_id}","starred_url":"https://api.github.com/users/aamuz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aamuz/subscriptions","organizations_url":"https://api.github.com/users/aamuz/orgs","repos_url":"https://api.github.com/users/aamuz/repos","events_url":"https://api.github.com/users/aamuz/events{/privacy}","received_events_url":"https://api.github.com/users/aamuz/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-06-26T15:12:59Z","updated_at":"2018-06-26T15:12:59Z","closed_at":null,"author_association":"NONE","body":"When Ocelot is used with and external IdentityServer, everything is awesome and works like expected. However, what i haven't figured out from the documentation is where can I set the authorization for the administration/configuration endpoint so that users with, lets say, admin claim only can access it.\r\n\r\nRight now all identities that passes the authentication has access to that endpoint, means they can change the reroute config. I must have missing something simple.\r\n"}}
{"actor":{"display_login":"aamuz"}}