extract hardcoded jwt claim names into config (#97)

* extract hardcoded jwt field names into config

* Update config.go

Co-authored-by: James Read <contact@jread.com>
This commit is contained in:
Bernard Crnković 2023-01-10 23:29:31 +01:00 committed by GitHub
parent edf10fdd9f
commit e18df74d5a
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 6 additions and 2 deletions

View File

@ -72,6 +72,8 @@ type Config struct {
ShowNewVersions bool
AuthJwtCookieName string
AuthJwtSecret string
AuthJwtClaimUsername string
AuthJwtClaimUserGroup string
DefaultPermissions PermissionsList
AccessControlLists []AccessControlList
}
@ -93,6 +95,8 @@ func DefaultConfig() *Config {
config.CheckForUpdates = true
config.DefaultPermissions.Exec = true
config.DefaultPermissions.View = true
config.AuthJwtClaimUsername = "name"
config.AuthJwtClaimUserGroup = "group"
return &config
}

View File

@ -88,8 +88,8 @@ func startRestAPIServer(globalConfig *config.Config) error {
return nil
}
username := lookupClaimValueOrDefault(claims, "name", "none")
usergroup := lookupClaimValueOrDefault(claims, "group", "none")
username := lookupClaimValueOrDefault(claims, cfg.AuthJwtClaimUsername, "none")
usergroup := lookupClaimValueOrDefault(claims, cfg.AuthJwtClaimUserGroup, "none")
md := metadata.Pairs(
"username", username,