Specify error when entity is not entitled to wlcg.group

WLCG-AuthZ-WG / common-jwt-profile

A repo for the WLCG Common JWT profile document

3 stars 8 forks source link

Specify error when entity is not entitled to wlcg.group #13

Closed DrDaveD closed 3 years ago

DrDaveD commented 3 years ago

This changes the behavior of what to do if an entity requests a group in wlcg.groups that they are not entitled to. Instead of allowing an access token to be returned without the scope, specify an access_denied error.

This is consistent with the proposal for wlcg.capabilityset in pr #10.