Merge pull request #54 from avantifellows/bug/update-refr-tok

Update refresh token code to add claims
avantifellows · Aug 27, 2024 · b229b5e · b229b5e
2 parents c3f9319 + a15936b
commit b229b5e
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/app/router/auth.py b/app/router/auth.py
@@ -54,7 +54,14 @@ def create_access_token(auth_user: AuthUser, Authorize: AuthJWT = Depends()):
 def refresh_token(Authorize: AuthJWT = Depends()):
     Authorize.jwt_refresh_token_required()
     current_user = Authorize.get_jwt_subject()
-    new_access_token = Authorize.create_access_token(subject=current_user)
+    old_data = Authorize.get_raw_jwt()
+    if "group" in old_data:
+        custom_claims = {"group": old_data["group"]}
+    else:
+        custom_claims = {}
+    new_access_token = Authorize.create_access_token(
+        subject=current_user, user_claims=custom_claims
+    )
     return {"access_token": new_access_token}