Closed norkunas closed 2 years ago
Based on mercure specs payload could be included in the jwt so it's exposed through subscriptions, but creating jwt cookie with Authorization service doesn't allow that.
payload
Authorization
Good catch, we should add a new attribute for this.
What about just merging with mercure claim if it is provided in additionalClaims?
Indeed it's maybe even better as it's future proof. We could also do both!
Based on mercure specs
payload
could be included in the jwt so it's exposed through subscriptions, but creating jwt cookie withAuthorization
service doesn't allow that.