Permissions

[johakoch]

Changed permission handling:

• renamed beta_scope attribute for api and endpoint blocks to beta_required_permission; beta_required_permission in endpoint now overriding beta_required_permission in containing api block
• renamed beta_scope_claim and beta_scope_map attributes for jwt block to beta_permissions_claim and beta_permissions_map
• removed beta_operation_denied and beta_scope error types
• renamed beta_insufficient_scope error type to beta_insufficient_permissions
• renamed undocumented request.context.scopes to request.context.beta_granted_permissions
• added request.context.beta_required_permission

server {
  api {
    access_control = ["at"]

    error_handler "beta_insufficient_permissions" {
      response {
        status = 403
        json_body = {
          missing_permission = request.context.beta_required_permission
        }
      }
    }

    endpoint "/" {
      beta_required_permission = {
        GET = "calendar.readonly"
        POST = "calendar"
      }
      response {
        json_body = {
          granted_permissions = request.context.beta_granted_permissions
        }
      }
    }

    endpoint "/open" {
      beta_required_permission = ""
      response {
        body = "open"
      }
    }
  }
}

definitions {
  jwt "at" {
    beta_permissions_claim = "scope"
    beta_permissions_map = {
      calendar = ["calendar.readonly"]
    }
  }
}

---

Reviewer checklist

• Read PR description: a summary about the changes is required
• Changelog updated
• Documentation: docs/{Reference, Cli, ...}, Docker and cli help/usage
• Pulled branch, manually tested
• Verified requirements are met
• Reviewed the code
• Reviewed the related tests