devstack/authorizer
4
0
Fork 0
Code Pull Requests Actions Activity

feat(server): add allowed_roles in access_token + refresh_token

Browse Source
This commit is contained in:
Lakhan Samani 2022-11-07 07:11:23 +05:30
parent 307c6f7d15
commit 4afd544c41
1 changed files with 22 additions and 20 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
server/token/auth_token.go
View File

@ -124,6 +124,7 @@ func CreateRefreshToken(user models.User, roles, scopes []string, hostname, nonc
"scope": scopes, "scope": scopes,
"nonce": nonce, "nonce": nonce,
"login_method": loginMethod, "login_method": loginMethod,
"allowed_roles": strings.Split(user.Roles, ","),
} }
token, err := SignJWTToken(customClaims) token, err := SignJWTToken(customClaims)
@ -163,6 +164,7 @@ func CreateAccessToken(user models.User, roles, scopes []string, hostName, nonce
"scope": scopes, "scope": scopes,
"roles": roles, "roles": roles,
"login_method": loginMethod, "login_method": loginMethod,
"allowed_roles": strings.Split(user.Roles, ","),
} }
token, err := SignJWTToken(customClaims) token, err := SignJWTToken(customClaims)