Auth/API: rewrite claims to new claims_map mimic

CactuseSecurity / firewall-orchestrator

Network Security data repository for automation, reporting and compliance of firewall rules

https://fwo.cactus.de

Apache License 2.0

31 stars 11 forks source link

Auth/API: rewrite claims to new claims_map mimic #528

Open tpurschke opened 3 years ago

tpurschke commented 3 years ago

[ ] Introduce claims_map in JWT configuration that allows you to use JWT tokens without any custom Hasura claims see here section claims_map
[x] it looks like unique_name claim is sometimes simply called "name" see aspnet/Security#1910 maybe add the following to CreateJWT and CreateJWTMiddlewareServer: JwtSecurityTokenHandler.DefaultInboundClaimTypeMap.Clear() this leads to failed tests and maybe also to our current issue with login for lxd hosts

NilsPur commented 3 years ago

@tpurschke would you take care of the custom Hasura claim mapping so we can get rid of the additonal x-hasura-... claims? You can then again assign me the issue so i can take care of the c# part