temporal
temporal copied to clipboard
Support for regex pattern in DefaultJWTClaimMapper permission parser
What changed?
Added support for parsing permissions from JWT claim using regular expression
Why?
Default JWT Claim Mapper expects permission in form namespace:role. If it's not possible to configure JWT issuer to follow namespace:role permissionsPattern can be set to regular expression with named groups to parse permission. More details in issue gh-7560
How did you test it?
- Unit tests
- Local tests
- Self hosted environment (ongoing)
Potential risks
This change is only activated if new configuration is provided
Documentation
WIP
Is hotfix candidate?
No
LGTM. Could you also open a PR to document this in our documentation repo: https://github.com/temporalio/documentation/blob/main/docs/production-deployment/self-hosted-guide/security.mdx#default-jwt-claimmapper?
@bergundy, will do that! Thanks, appreciate the support!