Scope Validation

islax · Jul 25, 2019 · 8e7552c · 8e7552c
1 parent ad52f23
commit 8e7552c
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/security/Token.go b/security/Token.go
@@ -41,7 +41,9 @@ func (token *JwtToken) isValidForScope(allowedScopes []string) bool {
 		if ok, _ := inArray(allowedScope, token.Scopes); !ok {
 			scopeParts := strings.Split(allowedScope, ":")
 			if ok, _ := inArray(scopeParts[0]+":*", token.Scopes); !ok {
-				allScopesMatched = false
+				if ok, _ := inArray("*:"+scopeParts[1], token.Scopes); !ok {
+					allScopesMatched = false
+				}
 			}
 		}
 	}