Open ferjm opened 7 years ago
Right now we are generating two kind of session tokens:
{ "id": "admin", "scope": "admin" }
{ "id": { "opaqueId": "facebook_id", "provider": "facebook", "clientKey": "02e9c7" }, "scope": "user" }
Session tokens must always contain a client key, a list of allowed permissions, and may have or may not have a user associated. So we should end up with:
{ "clientId": "1234567890987654321", "scopes": ["sensorthings"] }
{ "clientId": "1234567890987654321", "userId": { "opaqueId": "facebook_id", "idp": "facebook" }, "scopes": ["sensorthings"] }
The list of permissions is tbd in #53
Right now we are generating two kind of session tokens:
Session tokens must always contain a client key, a list of allowed permissions, and may have or may not have a user associated. So we should end up with:
The list of permissions is tbd in #53