Trying to understand optionality of required claims.

[fisx]

Why AuthRequired (Maybe claims), and not AuthRequired claims? It seems like the former requires you to always add a dynamic check to the handler. The latter would allow to write claim types that can be completely ignore by the handler, because it already knows it's all there from the types.

I'll try to answer this myself, just started reading. :-)

[fisx]

and here is the answer: i was reading the README wrong. :) AuthRequired and AuthOptional both work as expected, see here:

[...]
    :<|> "login" :> AuthRequired (ClaimSub Text) :> Get '[JSON] Text
    :<|> "login-optional" :> AuthOptional (ClaimSub Text) :> Get '[JSON] Text
[...]
        :<|> runAppM . resourceHandler . Just
        :<|> runAppM . resourceHandler
[...]
resourceHandler :: Maybe (ClaimSub Text) -> AppM Text
resourceHandler = [...]
[...]