Add support for perm=foo+bar to specify multiple scopes that are required. Multiple perm args are acceptable too. Pretty logging of permission denied errors.

2026-01-29 21:11:29 +00:00
parent 58b56a09a4
commit 3d2151fed7
3 changed files with 38 additions and 10 deletions
@@ -78,7 +78,7 @@ async def validate_token(
    try:
        ctx = await authz.verify(
            auth,
-            perm,
+            " ".join(perm).split(),
            host=request.headers.get("host"),
            max_age=max_age,
        )
@@ -131,7 +131,10 @@ async def forward_authentication(
    """
    try:
        ctx = await authz.verify(
-            auth, perm, host=request.headers.get("host"), max_age=max_age
+            auth,
+            " ".join(perm).split(),
+            host=request.headers.get("host"),
+            max_age=max_age,
        )
        # Build permission scopes for Remote-Groups header
        role_permissions = (