Add email claim to JWT, adjust role/permissions claims, and allow localhost:5173 origin

This commit is contained in:
Jan Meinl
2026-04-12 15:49:21 +02:00
parent 2ad7cae8c4
commit a46b8081cf
2 changed files with 4 additions and 2 deletions
@@ -95,6 +95,7 @@ public class Backend {
logger.info("Configuring web server..."); logger.info("Configuring web server...");
webServer.addAllowedOrigin("http://localhost:3000"); webServer.addAllowedOrigin("http://localhost:3000");
webServer.addAllowedOrigin("http://localhost:5173");
logger.success("Web server configured!"); logger.success("Web server configured!");
logger.info("Starting web server..."); logger.info("Starting web server...");
@@ -253,6 +253,7 @@ public class UserProvider implements Provider {
.algorithm(jwtSignAlgorithm) .algorithm(jwtSignAlgorithm)
.audience("flightscore-api") .audience("flightscore-api")
.issuer("flightscore-api") .issuer("flightscore-api")
.claim("email", user.email())
.subject(user.id().toString()) .subject(user.id().toString())
.expiresAt(expiresAt / 1000) .expiresAt(expiresAt / 1000)
.issuedAt(System.currentTimeMillis() / 1000); .issuedAt(System.currentTimeMillis() / 1000);
@@ -260,8 +261,8 @@ public class UserProvider implements Provider {
if (user.role() != null) { if (user.role() != null) {
JSONArray permissions = new JSONArray(); JSONArray permissions = new JSONArray();
user.role().permissions().forEach(permission -> permissions.put(permission.name())); user.role().permissions().forEach(permission -> permissions.put(permission.name()));
builder.claim("permission", permissions.toString()); builder.claim("permissions", permissions.toString());
builder.claim("role", user.role().id().toString()); builder.claim("role", user.role().name());
} }
return builder.sign(); return builder.sign();