Authz: Setup access claims for service identity (#100986)

* Setup access claims for service identity and add them to identityes without any claims
This commit is contained in:
Karl Persson
2025-02-20 13:54:47 +01:00
committed by GitHub
parent be81314e21
commit 16fda6f686
5 changed files with 89 additions and 32 deletions
@@ -9,6 +9,7 @@ import (
"github.com/go-jose/go-jose/v3/jwt"
"github.com/grafana/authlib/authn"
"github.com/grafana/authlib/types"
"github.com/grafana/grafana/pkg/apimachinery/identity"
)
type inProcExchanger struct {
@@ -37,8 +38,8 @@ func createInProcToken() (*authn.TokenExchangeResponse, error) {
},
Rest: authn.AccessTokenClaims{
Namespace: "*",
Permissions: []string{"folder.grafana.app:*", "dashboard.grafana.app:*"},
DelegatedPermissions: []string{"folder.grafana.app:*", "dashboard.grafana.app:*"},
Permissions: identity.ServiceIdentityClaims.Rest.Permissions,
DelegatedPermissions: identity.ServiceIdentityClaims.Rest.DelegatedPermissions,
},
}