cube-js/cube

Security Context does not convert text value to JSON

Open

#4,811 建立於 2022年6月27日

在 GitHub 查看
 (8 留言) (0 反應) (0 負責人)Rust (19,563 star) (1,965 fork)batch import
docshelp wanted

描述

Describe the bug I am trying to use security context with Cognito and JWT. As per your documentation we generate JWT. The response is like:

"user": "{\"company_id\":\"moleculedata\",\"user_id\":\"5badab3e-1e5d-4414-8a80-269fdaf2ff8e\",\"roles\":[\"user\"]}"

similar to example in the documentation [https://cube.dev/docs/security/jwt/aws-cognito]

when I try to use it with CUBEJS_JWT_CLAIMS_NAMESPACE=user, I get an error in the playground:

TypeCannot create proxy with a non-object as target or handler

I hope to use the values inside user key form JWT.

If any questions, please let me know.

Kind regards, Rytis

貢獻者指南

技術棧
typescriptnodejs
領域
securitybackendauthentication
議題類型
bug
難度面向新貢獻者的預計實作難度，1 表示很小改動，5 表示專家級工作。
3
預計時間有經驗貢獻者完成調查、實作、測試並準備 pull request 的粗略時間範圍。
1-3 hours
活動狀態議題目前的可參與程度：新鮮、活躍、陳舊、阻塞或等待維護者輸入。
stale
清晰度議題是否清楚說明預期改動、驗收標準和下一步。
clear
前置要求
Basic understanding of JWTFamiliarity with Cube.js security context
新手友善度1-100 的估計分數，表示該議題對首次貢獻者的友善程度。
50
研究方向
Investigate the security context module in Cube.js, particularly how the JWT claims namespace is parsed and converted to an object. The error indicates that a string value is not being parsed as JSON. Look at the relevant source files (likely in the packages directory related to authentication) and consider adding a JSON.parse or similar conversion when the claim value is a string that represents a JSON object. Refer to the Cube.js documentation on JWT authentication for expected behavior.
Security Context does not convert text value to JSON · cube-js/cube#4811 | Good First Issue