cube-js/cube

Security Context does not convert text value to JSON

Open

Aperta il 27 giu 2022

Vedi su GitHub
 (8 commenti) (0 reazioni) (0 assegnatari)Rust (19.563 star) (1965 fork)batch import
docshelp wanted

Descrizione

Describe the bug I am trying to use security context with Cognito and JWT. As per your documentation we generate JWT. The response is like:

"user": "{\"company_id\":\"moleculedata\",\"user_id\":\"5badab3e-1e5d-4414-8a80-269fdaf2ff8e\",\"roles\":[\"user\"]}"

similar to example in the documentation [https://cube.dev/docs/security/jwt/aws-cognito]

when I try to use it with CUBEJS_JWT_CLAIMS_NAMESPACE=user, I get an error in the playground:

TypeCannot create proxy with a non-object as target or handler

I hope to use the values inside user key form JWT.

If any questions, please let me know.

Kind regards, Rytis

Guida contributor

Tech stack
typescriptnodejs
Dominio
securitybackendauthentication
Tipo issue
bug
DifficoltàQuanto dovrebbe essere impegnativa per un nuovo contributor.
3
Tempo stimatoTempo stimato per completare e verificare uno scope piccolo.
1-3 hours
Stato attivitàQuanto è probabile che la issue sia ancora attiva e reviewable.
stale
ChiarezzaQuanto chiaramente la issue descrive problema, scope e risultato atteso.
clear
Prerequisiti
Basic understanding of JWTFamiliarity with Cube.js security context
Adatta ai principiantiQuanto la issue è adatta a contributor alla prima esperienza.
50
Direzione di ricerca
Investigate the security context module in Cube.js, particularly how the JWT claims namespace is parsed and converted to an object. The error indicates that a string value is not being parsed as JSON. Look at the relevant source files (likely in the packages directory related to authentication) and consider adding a JSON.parse or similar conversion when the claim value is a string that represents a JSON object. Refer to the Cube.js documentation on JWT authentication for expected behavior.