Skip to content

Add role check#4

Closed
utix wants to merge 4 commits intowebstack:forkfrom
utix:fork
Closed

Add role check#4
utix wants to merge 4 commits intowebstack:forkfrom
utix:fork

Conversation

@utix
Copy link
Copy Markdown

@utix utix commented Mar 25, 2017

Allow to restrain specific ressource to specific roles

The role is picked in JWT_ROLE field of identity, if the intersection of allowed roles and roles of the user is not empty the user can access to the ressource.

The default payload_handler doesn't put role into the JWT, a specific handler should be done to server JWT with role (example done into the tests)
My usage is to implements microservices using a JWT not served by python.
The client part is already live and working well in python 2.7.
Tests are ok in 2.7, 3.3 and 3.4

utix added 4 commits March 25, 2017 16:38
* jwt_error_handler was renamed error_handler
* jwt_payload_handler was renamed payload_handler

Rename was done in 8b6c1f5
If a ressource has a role specified the jwt should have at least this role

If a list is specified, the jwt should have one (or several) of this role
Conflicts:
	tests/test_jwt.py
        tests/conftest.py
jwt_payload_handler was renamed into payload_handler
@stephane
Copy link
Copy Markdown
Member

Very nice suite of tests. Merged and published on pypi (https://pypi.org/project/Webstack-Flask-JWT/). Thank you.

@stephane stephane closed this Mar 27, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants