fix(frontend,backend): Remove hardcoded legalconsenthub keycloak client ID

2026-03-16 08:29:54 +01:00
parent d4c6def398
commit 37a907e087
4 changed files with 12 additions and 11 deletions
--- a/legalconsenthub/server/routes/auth/keycloak.get.ts
+++ b/legalconsenthub/server/routes/auth/keycloak.get.ts
@@ -21,7 +21,7 @@ export default defineOAuthKeycloakEventHandler({
    }

    const organizations = decodedJwt ? extractOrganizations(decodedJwt) : []
-    const roles = decodedJwt ? extractRoles(decodedJwt) : []
+    const roles = decodedJwt ? extractRoles(decodedJwt, config.oauth.keycloak.clientId) : []

    await setUserSession(event, {
      user: {
@@ -71,6 +71,6 @@ function extractOrganizations(decoded: KeycloakTokenPayload): Organization[] {
  return organizations
 }

-function extractRoles(decoded: KeycloakTokenPayload): string[] {
-  return decoded?.resource_access?.legalconsenthub?.roles ?? []
+function extractRoles(decoded: KeycloakTokenPayload, clientId: string): string[] {
+  return decoded?.resource_access?.[clientId]?.roles ?? []
 }