admin/hspguard
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: dynamic user based roles

Browse Source
This commit is contained in:
Amir Adal
2025-06-04 19:11:01 +02:00
parent 98ae3e06e9
commit 11ac92a026
1 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
internal/oauth/token.go
View File

@ -76,6 +76,12 @@ func (h *OAuthHandler) tokenEndpoint(w http.ResponseWriter, r *http.Request) {
return return
} }
var roles = []string{"user"}
if user.IsAdmin {
roles = append(roles, "admin")
}
claims := types.ApiClaims{ claims := types.ApiClaims{
Email: user.Email, Email: user.Email,
// TODO: // TODO:
@ -83,7 +89,7 @@ func (h *OAuthHandler) tokenEndpoint(w http.ResponseWriter, r *http.Request) {
Name: user.FullName, Name: user.FullName,
Picture: user.ProfilePicture, Picture: user.ProfilePicture,
Nonce: nonce, Nonce: nonce,
Roles: []string{"user", "admin"}, Roles: roles,
RegisteredClaims: jwt.RegisteredClaims{ RegisteredClaims: jwt.RegisteredClaims{
Issuer: h.cfg.Jwt.Issuer, Issuer: h.cfg.Jwt.Issuer,
// TODO: use dedicated API id that is in local DB and bind to user there // TODO: use dedicated API id that is in local DB and bind to user there