pomerium/authorize/evaluator
Cuong Manh Le 4a3fb5d44b
authorize: get claims from signed jwt (#954)
authorize: get claims from signed jwt

When doing databroker refactoring, all claims information were moved to
signed JWT instead of raw session JWT. But we are still looking for
claims info in raw session JWT, causes all X-Pomerium-Claim-* headers
being gone.

Fix this by looking for information from signed JWT instead.

Note that even with this fix, the X-Pomerium-Claim-Groups is still not
present, but it's another bug (see #941) and will be fixed later.

Fixes #936
2020-06-22 09:51:32 +07:00
..
mock_evaluator authorize: use jwt insead of state struct (#514) 2020-03-10 11:19:26 -07:00
opa feature/databroker: user data and session refactor project (#926) 2020-06-19 07:52:44 -06:00
evaluator.go authorize: get claims from signed jwt (#954) 2020-06-22 09:51:32 +07:00
evaluator_test.go authorize: get claims from signed jwt (#954) 2020-06-22 09:51:32 +07:00
functions.go feature/databroker: user data and session refactor project (#926) 2020-06-19 07:52:44 -06:00
functions_test.go feature/databroker: user data and session refactor project (#926) 2020-06-19 07:52:44 -06:00