search

rokwire / surveys-building-block

Building Block that manages surveys in the Rokwire Platform.
Apache License 2.0
0 stars 1 forks source link

[BUG] Client APIs failing scope authorization #1

Closed shurwit closed 1 year ago

shurwit commented 1 year ago

Describe the bug Currently all client APIs are failing scope authorization despite having the "all:all:all" scope. This is occurring because we are using NewCasbinStringAuthorization instead of NewCasbinScopeAuthorization for the scope authorization on the client auth handlers.

To Reproduce Steps to reproduce the behavior:

  1. Make request to any client API with valid user token
  2. Receive 403 error

Expected behavior The client API requests should succeed if a valid user token is provided.