README.md in gds-sso-13.0.0 vs README.md in gds-sso-13.1.0

- old
+ new

@@ -102,9 +102,19 @@ authorise_user!('edit_publications') end end ``` +`authorise_user!` can be configured to check for multiple permissions: + +```ruby +# fails unless the user has at least one of these permissions +authorise_user!(any_of: %w(edit create)) + +# fails unless the user has both of these permissions +authorise_user!(all_of: %w(edit create)) +``` + ### Authorisation for API Users In addition to the single-sign-on strategy, this gem also allows authorisation via a "bearer token". This is used by publishing applications to be authorised as an [API user](https://signon.publishing.service.gov.uk/api_users).