graphql-engine icon indicating copy to clipboard operation
graphql-engine copied to clipboard

Feature request: Allow checking of values in JWT against fixed strings

Open elgordino opened this issue 5 years ago • 2 comments

I would like the ability to check values in the JWT against set values (strings, booleans etc)

For example if the user's token contains 'allow_write:true` I would like to be able to check for this, rather than having to traverse the database to find the users permissions.

This will reduce the DB overhead of the security rules as it would not be necessary to retrieve data from any tables other than the one being updated (providing the user_id is on the table being updated).

There's some more detail on this towards the end of this blog post https://dev.to/lineup-ninja/modelling-teams-and-user-security-with-hasura-204i

This is just a nice to have, particularly for any users migrating from Firebase.

elgordino avatar Apr 01 '19 09:04 elgordino