Change the backendrole check's claim name into br

Signed-off-by: Ryan Liang <[email protected]>
peternied · Aug 22, 2023 · 1f12e5e · 1f12e5e
1 parent b2c7d75
commit 1f12e5e
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/src/main/java/org/opensearch/security/authtoken/jwt/JwtVendor.java b/src/main/java/org/opensearch/security/authtoken/jwt/JwtVendor.java
@@ -152,7 +152,7 @@ public String createJwt(
 
         if (bwcModeEnabled && backendRoles != null) {
             String listOfBackendRoles = String.join(",", backendRoles);
-            jwtClaims.setProperty("dbr", listOfBackendRoles);
+            jwtClaims.setProperty("br", listOfBackendRoles);
         }
 
         String encodedJwt = jwtProducer.processJwt(jwt);

diff --git a/src/main/java/org/opensearch/security/http/OnBehalfOfAuthenticator.java b/src/main/java/org/opensearch/security/http/OnBehalfOfAuthenticator.java
@@ -104,11 +104,11 @@ private List<String> extractSecurityRolesFromClaims(Claims claims) {
 
     private String[] extractBackendRolesFromClaims(Claims claims) {
         // Object backendRolesObject = ObjectUtils.firstNonNull(claims.get("ebr"), claims.get("dbr"));
-        if (!claims.containsKey("dbr")) {
+        if (!claims.containsKey("br")) {
             return null;
         }
 
-        Object backendRolesObject = claims.get("dbr");
+        Object backendRolesObject = claims.get("br");
         String[] backendRoles;
 
         if (backendRolesObject == null) {