Merge pull request #161 from ImMin5/master

Add user_groups info at metadata
cloudforet-io · Jan 3, 2025 · bcb6e9d · bcb6e9d
2 parents c5a978c + c1c4d25
commit bcb6e9d
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/src/spaceone/core/handler/authentication_handler.py b/src/spaceone/core/handler/authentication_handler.py
@@ -105,7 +105,7 @@ def _update_meta(self, token_info: dict) -> None:
         Args:
             token_info(dict): {
                 'iss': 'str',   # issuer (spaceone.identity)
-                'rol': 'str',   # role type
+                'rol': 'str',   # role type (SYSTEM_TOKEN | DOMAIN_ADMIN | WORKSPACE_OWNER | WORKSPACE_MEMBER | USER )
                 'typ': 'str',   # token type (ACCESS_TOKEN | REFRESH_TOKEN | CLIENT_SECRET)
                 'own': 'str',   # owner (USER | APP)
                 'did': 'str',   # domain_id
@@ -116,6 +116,7 @@ def _update_meta(self, token_info: dict) -> None:
                 'jti': 'str',   # jwt id (token_key | client_id), Optional
                 'permissions': 'list',  # permissions, Optional
                 'projects': 'list',     # project_ids, if workspace member, Optional
+                'user_groups': 'list',  # user_group_ids, if workspace owner or member, Optional
                 'injected_params': 'dict',  # injected parameters, override parameters, Optional
                 'ver': 'str',   # jwt version
         """
@@ -128,6 +129,7 @@ def _update_meta(self, token_info: dict) -> None:
         workspace_id = token_info.get("wid")
         permissions = token_info.get("permissions")
         projects = token_info.get("projects")
+        user_groups = token_info.get("user_groups")
         injected_params = token_info.get("injected_params")
 
         self.transaction.set_meta("authorization.token_type", token_type)
@@ -138,6 +140,7 @@ def _update_meta(self, token_info: dict) -> None:
         self.transaction.set_meta("authorization.workspace_id", workspace_id)
         self.transaction.set_meta("authorization.permissions", permissions)
         self.transaction.set_meta("authorization.projects", projects)
+        self.transaction.set_meta("authorization.user_groups", user_groups)
         self.transaction.set_meta("authorization.injected_params", injected_params)
 
         if owner_type == "USER":