add permission layer for admins for backend API

2022-06-08 21:41:59 +02:00 · 2022-06-08 21:41:59 +02:00 · 907e0ecaab
commit 907e0ecaab
parent 62187e0b29
4 changed files with 33 additions and 1 deletions
--- a/areas/auth/auth.py
+++ b/areas/auth/auth.py
@ -37,7 +37,7 @@ def hydra_callback():
            identity = i

    access_token = create_access_token(
-        identity=token, expires_delta=timedelta(days=365)
+        identity=token, expires_delta=timedelta(days=365), additional_claims={"user_id": identity["id"]}
    )

    apps = App.query.all()