Auth and rules - Pawabase

Use these when a flow serves a signed-in person: require sign-in, load their profile, or check an access rule and branch on the answer. This page documents 4 blocks. For how flows work, see Flows and the flow editor. Values in settings can use templates such as {{ input.id }} and {{ steps.load.output.email }}; see Block reference overview.

Block	What it does
Look up user	Loads any user of this project from the sign-in system by id.
Require sign-in	Fails with 401 unless the caller is signed in (optionally with a role).
Current user	Loads the calling user’s full profile from the sign-in system.
Check policy	Evaluates a policy and follows `allowed` or `denied`.

Look up user

Key: auth.lookup Loads any user of this project from the sign-in system by id. Continues to: next, missing (follow the one that applies)

Setting	Type	Required	Default	Notes
`user_id`	text	yes

Key: auth.require Fails with 401 unless the caller is signed in (optionally with a role). Continues to: next

Setting	Type	Required	Default	Notes
`role`	text
`permission`	text

Current user

Key: auth.user Loads the calling user’s full profile from the sign-in system. Continues to: next, anonymous (follow the one that applies) This block has no settings.

Check policy

Key: policy.check Evaluates a policy and follows allowed or denied. Continues to: allowed, denied (follow the one that applies)

Setting	Type	Required	Default	Notes
`policy`	any JSON	yes		Policy name or inline condition
`record`	any JSON
`input`	any JSON