cube-js/cube

Security Context does not convert text value to JSON

Open

#4811 opened on Jun 27, 2022

View on GitHub
 (8 comments) (0 reactions) (0 assignees)Rust (19,563 stars) (1,965 forks)batch import
docshelp wanted

Description

Describe the bug I am trying to use security context with Cognito and JWT. As per your documentation we generate JWT. The response is like:

"user": "{\"company_id\":\"moleculedata\",\"user_id\":\"5badab3e-1e5d-4414-8a80-269fdaf2ff8e\",\"roles\":[\"user\"]}"

similar to example in the documentation [https://cube.dev/docs/security/jwt/aws-cognito]

when I try to use it with CUBEJS_JWT_CLAIMS_NAMESPACE=user, I get an error in the playground:

TypeCannot create proxy with a non-object as target or handler

I hope to use the values inside user key form JWT.

If any questions, please let me know.

Kind regards, Rytis

Contributor guide

Tech stack
typescriptnodejs
Domain
securitybackendauthentication
Issue type
bug
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-3 hours
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
stale
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
clear
Prerequisites
Basic understanding of JWTFamiliarity with Cube.js security context
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
50
Research direction
Investigate the security context module in Cube.js, particularly how the JWT claims namespace is parsed and converted to an object. The error indicates that a string value is not being parsed as JSON. Look at the relevant source files (likely in the packages directory related to authentication) and consider adding a JSON.parse or similar conversion when the claim value is a string that represents a JSON object. Refer to the Cube.js documentation on JWT authentication for expected behavior.