Fix refresh token payload structure on shared refresh (#10875)

Fixes #10822
directus · Jan 5, 2022 · e4db9b2 · e4db9b2
1 parent 6a3ee1e
commit e4db9b2
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/api/src/services/authentication.ts b/api/src/services/authentication.ts
@@ -321,6 +321,10 @@ export class AuthenticationService {
 				collection: record.share_collection,
 				item: record.share_item,
 			};
+			tokenPayload.app_access = false;
+			tokenPayload.admin_access = false;
+
+			delete tokenPayload.id;
 		}
 
 		const customClaims = await emitter.emitFilter(