Skip to content

Commit abba554

Browse files
authored
Merge pull request #86 from topcoder-platform/fix-roles
do not validate m2m token in roles guard
2 parents e1f7806 + f8ceace commit abba554

File tree

1 file changed

+5
-0
lines changed

1 file changed

+5
-0
lines changed

src/core/auth/guards/roles.guard.ts

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -17,6 +17,11 @@ export class RolesGuard implements CanActivate {
1717
}
1818

1919
const request = context.switchToHttp().getRequest();
20+
const tokenIsM2M = Boolean(request.m2mTokenScope);
21+
if (tokenIsM2M) {
22+
return Boolean(request.idTokenVerified);
23+
}
24+
2025
const { auth0User = {} } = request;
2126
const userRoles = Object.keys(auth0User).reduce((roles, key) => {
2227
if (key.match(/claims\/roles$/gi)) {

0 commit comments

Comments
 (0)