3pp-mirror/pomerium
1
0
Fork 0
mirror of https://github.com/pomerium/pomerium.git synced 2025-05-31 09:57:17 +02:00
Code Issues Projects Releases Packages Wiki Activity

authorize: add sid to JWT claims (#2420)

Browse source 
* authorize: add sid to JWT claims

* fix import ordering
This commit is contained in:
Caleb Doxsey 2021-08-02 16:11:05 -06:00 • committed by GitHub
parent 97af64df60
commit a64e5b5fa1
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 13 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
authorize/evaluator/opa/policy/headers.rego
View file

@ -139,6 +139,9 @@ jwt_payload_groups = v {
true
}
# the session id is always set to the input session id, even if impersonating
jwt_payload_sid := input.session.id
base_jwt_claims := [
["iss", jwt_payload_iss],
["aud", jwt_payload_aud],
@ -149,6 +152,7 @@ base_jwt_claims := [
["user", jwt_payload_user],
["email", jwt_payload_email],
["groups", jwt_payload_groups],
["sid", jwt_payload_sid]
]
additional_jwt_claims := [[k, v] |