From e502368c8ba81ba758b328cd5bd2bcba85f00309 Mon Sep 17 00:00:00 2001 From: lebaudantoine Date: Fri, 31 May 2024 18:15:00 +0200 Subject: [PATCH] =?UTF-8?q?=F0=9F=9A=A7(backend)=20return=20groups=20when?= =?UTF-8?q?=20requesting=20the=20resource=20server?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Work in progress code, used during last Monday demo. I will need to iterate. --- src/backend/core/resource_server/views.py | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/src/backend/core/resource_server/views.py b/src/backend/core/resource_server/views.py index 1e1fa633..c7e0c8b8 100644 --- a/src/backend/core/resource_server/views.py +++ b/src/backend/core/resource_server/views.py @@ -42,4 +42,13 @@ class DataView(APIView): def get(self, request): """Temporary route to test resource server authentication.""" token = request.auth - return Response(token) + if 'groups' in token.get('scope'): + # TODO - return a proper error + Response({'error scope "groups" not requested to the authorization server'}) + + slugs = [team.slug for team in request.user.teams.all()] + + # TODO - use SCIM specification to exchange data + return Response({ + "groups": slugs + })