@pre-execute

Pre-execution pipeline for @execute. If this pipeline rejects, the main @execute and @post-execute pipelines are skipped, and the request is rejected immediately.

Note: The @ prefix is required for pipeline blocks. The legacy syntax without @ (e.g., pre-execute {}) is deprecated and emits warnings. Use @pre-execute {} for new configurations.

See also

• Execution context - Available variables
• Actions - Available actions
• Pipeline directives - Control flow

Example

@pre-execute {
    if all {
        aaa.identity.realm == "blocked.com";
    } then {
        reject;
    }
}