Breaking change: if the request has valid credentials but fails access (scope, entity), the request.auth.isAuthenticated property will be true. It will still fail and jump to response validation as before, but the flag will not be false as before. Adds a new request.isAuthorized flag which will be false.
Breaking change: if the request has valid credentials but fails access (scope, entity), the
request.auth.isAuthenticatedproperty will betrue. It will still fail and jump to response validation as before, but the flag will not befalseas before. Adds a newrequest.isAuthorizedflag which will befalse.