Add JWT realm_access roles to audit logs. Keep in parity with front-end

uwcirg · Dec 24, 2024 · 2a5135d · 2a5135d
1 parent d829f5d
commit 2a5135d
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/sof_wrapper/auth/views.py b/sof_wrapper/auth/views.py
@@ -156,12 +156,13 @@ def authorize():
     extracted_id_token = extract_payload(token_response.get('id_token'))
     username = extracted_id_token.get('preferred_username')
     DEA = extracted_id_token.get('DEA')
+    roles = extracted_id_token.get('realm_access',{}).get('roles')
 
     # standalone uses profile
     if 'profile' in extracted_id_token:
         session['user'] = session.get('user', extracted_id_token['profile'])
     else:
-        session['user'] = session.get('user', {'username': username, 'DEA': DEA})
+        session['user'] = session.get('user', {'username': username, 'DEA': DEA, 'roles': roles})
 
     if 'patient' in token_response:
         session['subject'] = session.get('subject', 'Patient/{}'.format(token_response['patient']))