b3b9c89544
Right now identity tokens can only be fetched by the Owner, which means they implicitly have the Owner role, but we want to expand that. The first step is adding the role to the token, and then we need to update each place which uses the token and add an assertion that the role is correct. |
||
|---|---|---|
| .. | ||
| api | ||
| mock-express-style | ||
| models | ||
| site | ||