95
return nil, err
96
}
98
>
if !ok {
99
return nil, serviceerror.NewPermissionDenied("unexpected value type of \"sub\" claim", "")
100
}
102
>
permissions, ok := jwtClaims[a.permissionsClaimName].([]any)
103
>
if ok {
104
>
err := a.extractPermissions(permissions, &claims)
105
>
if err != nil {
106
return nil, err
107
}
108
}
110
}
111
112
>
func (a *defaultJWTClaimMapper) extractPermissions(permissions []any, claims *Claims) error {
default_jwt_claim_mapper.go
113
>
for _, permission := range permissions {
114
>
p, ok := permission.(string)
115
>
if !ok {
116
a.logger.Warn(fmt.Sprintf("ignoring permission that is not a string: %v", permission))
117
continue
118
}
120
>
if a.permissionsRegex != nil {
121
match := a.permissionsRegex.FindStringSubmatch(p)
122
if len(match) == 0 {