Method jwtAttributesForUser

admin/server/server.go:363–392

(ctx context.Context, userID, orgID string, projectPermissions *adminv1.ProjectPermissions)

}

func (s *Server) jwtAttributesForUser(ctx context.Context, userID, orgID string, projectPermissions *adminv1.ProjectPermissions) (map[string]any, error) {
	user, attributes, err := s.admin.DB.FindUserWithAttributes(ctx, userID, orgID)
	if err != nil {
		return nil, err
	}

	groups, err := s.admin.DB.FindUsergroupsForUser(ctx, user.ID, orgID)
	if err != nil {
		return nil, err
	}

	groupNames := make([]any, len(groups))
	for i, group := range groups {
		groupNames[i] = group.Name
	}

	attr := map[string]any{
		"name":   user.DisplayName,
		"email":  user.Email,
		"domain": user.Email[strings.LastIndex(user.Email, "@")+1:],
		"groups": groupNames,
		"admin":  projectPermissions.ManageProject,
	}

	for k, v := range attributes {
		attr[k] = v
	}

	return attr, nil
}

func (s *Server) jwtAttributesForService(ctx context.Context, serviceID string, projectPermissions *adminv1.ProjectPermissions) (map[string]any, error) {
	service, err := s.admin.DB.FindService(ctx, serviceID)