Provide funtion for checking permissions on a token about node-oauth2-jwt-bearer HOT 3 CLOSED

Hi @Hugomm - thanks for raising this

Because permissions is a proprietary Auth0 claim and this SDK is a generic OAuth SDK, we don't provide a requiredPermissions feature. But you can use the claimIncludes method to achieve the desired result.

app.get('/api/admin/managers',
    claimIncludes('permissions', 'admin', 'manager'),
    (req, res, next) => {
      // ...
    }
);

// Or create your own `requiredPermissions` method
const requiredPermissions = claimIncludes.bind(null, 'permissions')

app.get('/api/admin/managers',
    requiredPermissions('admin', 'manager'),
    (req, res, next) => {
      // ...
    }
);

from node-oauth2-jwt-bearer.

Thanks @adamjmcgrath for your clear and fast answer.

I have tested the function using the proposed wrapper to make things clearer and it's working as intended. Let me check it with my team and will close the issue if there are no further questions.

from node-oauth2-jwt-bearer.

@adamjmcgrath Already discussed this function with my team and we had no issues using it. Thanks for your reply I'm going to close the issue.

from node-oauth2-jwt-bearer.