Add support for fetching permissions JWT claim (#53)

Add permissions support.
workos · Jul 15, 2024 · 2c31be5 · 2c31be5
1 parent 6166ec4
commit 2c31be5
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 2 deletions.
diff --git a/src/interfaces.ts b/src/interfaces.ts
@@ -20,6 +20,7 @@ export interface UserInfo {
   sessionId: string;
   organizationId?: string;
   role?: string;
+  permissions?: string[];
   impersonator?: Impersonator;
   accessToken: string;
 }
@@ -36,6 +37,7 @@ export interface AccessToken {
   sid: string;
   org_id?: string;
   role?: string;
+  permissions?: string[];
 }
 
 export interface GetAuthURLOptions {

diff --git a/src/session.ts b/src/session.ts
@@ -152,13 +152,14 @@ async function getUser({ ensureSignedIn = false } = {}) {
     return { user: null };
   }
 
-  const { sid: sessionId, org_id: organizationId, role } = decodeJwt<AccessToken>(session.accessToken);
+  const { sid: sessionId, org_id: organizationId, role, permissions } = decodeJwt<AccessToken>(session.accessToken);
 
   return {
     sessionId,
     user: session.user,
     organizationId,
     role,
+    permissions,
     impersonator: session.impersonator,
     accessToken: session.accessToken,
   };
@@ -205,4 +206,4 @@ async function getSessionFromHeader(caller: string): Promise<Session | undefined
   return unsealData<Session>(authHeader, { password: WORKOS_COOKIE_PASSWORD });
 }
 
-export { encryptSession, updateSession, getUser, terminateSession };
+export { encryptSession, getUser, terminateSession, updateSession };