naprime comments

Results 5 comments of


                                            naprime

User scopes do not get propagated to the returned JWT provided by EG

I assigned scope to JWT credential but EG did NOT check it (alway skip scope check) ========In gateway.config ======== apiEndpoints: ip: host: '*' paths: ['/ip'] scopes: ['**admin2**'] ... ip: apiEndpoints:...

User scopes do not get propagated to the returned JWT provided by EG

I fixed by add jwtScopes policy

When tokenType = jwt, scope restriction doesn't work.

@XVincentX: Thanks! As your guide, I can fix this issue by add jwtScopes policy. Please add an "actionParam" to choose JWT scope field in your jwt policy. So we will...

When tokenType = jwt, scope restriction doesn't work.

@kevinswiber: You said "I think this issue is referring to use case 2, which should not require a custom scopes claim in the JWT. Scope management should work for JWT...

When tokenType = jwt, scope restriction doesn't work.

@XVincentX : I means you should add one more param to select which "scope" user defined in your JWT plugin (https://www.express-gateway.io/docs/policies/jwt/)