douban/helpdesk

认证后 get 用户 role 时, 会错误的获取其他 client 的 role

LeoQuote opened this issue · 0 comments

需要改的代码:

access = id_token.get('resource_access', {})
for rs in access.values():
roles.extend(rs.get('roles', []))

access = id_token.get('resource_access', {})
for rs in access.values():
roles.extend(rs.get('roles', []))

这里要只取对应 client id 的role, 其他的忽略

cc @everpcpc