fix: propagate service identity correctly for requester (#114423)

* fix: propagate service identity correctly for requester * revert
2025-12-02 10:38:37 +01:00
parent e36ea78771
commit d5de92e5b2
2 changed files with 143 additions and 0 deletions
@@ -156,6 +156,9 @@ func (i *Identity) GetExtra() map[string][]string {
 	if i.GetOrgRole().IsValid() {
 		extra["user-instance-role"] = []string{string(i.GetOrgRole())}
 	}
+	if i.AccessTokenClaims != nil && i.AccessTokenClaims.Rest.ServiceIdentity != "" {
+		extra[authn.ServiceIdentityKey] = []string{i.AccessTokenClaims.Rest.ServiceIdentity}
+	}
 	return extra
 }