diff --git a/src/api/configureApi.ts b/src/api/configureApi.ts index e8eff518..88e1a3a8 100644 --- a/src/api/configureApi.ts +++ b/src/api/configureApi.ts @@ -36,7 +36,7 @@ import makeMetricsApiMiddleware from './middleware/metrics'; import { createParticipantsRouter } from './routers/participants/participantsRouter'; import { createSitesRouter } from './routers/sitesRouter'; import { createUsersRouter } from './routers/usersRouter'; -import { API_PARTICIPANT_MEMBER } from './services/kcUsersService'; +import { API_PARTICIPANT_MEMBER_ROLE_NAME } from './services/kcUsersService'; import { LoggerService } from './services/loggerService'; import { UserService } from './services/userService'; @@ -135,7 +135,7 @@ export function configureAndStartApi(useMetrics: boolean = true, portNumber: num bypassHandlerForPaths( claimCheck((claim: Claim) => { const roles = claim.resource_access?.self_serve_portal_apis?.roles || []; - return roles.includes(API_PARTICIPANT_MEMBER); + return roles.includes(API_PARTICIPANT_MEMBER_ROLE_NAME); }), ...BYPASS_CLAIM_PATHS, ...BYPASS_AUTH_PATHS diff --git a/src/api/services/kcUsersService.ts b/src/api/services/kcUsersService.ts index 655d9506..ec37fb6e 100644 --- a/src/api/services/kcUsersService.ts +++ b/src/api/services/kcUsersService.ts @@ -4,6 +4,8 @@ import UserRepresentation from '@keycloak/keycloak-admin-client/lib/defs/userRep import { SSP_KK_API_CLIENT_ID, SSP_KK_SSL_RESOURCE, SSP_WEB_BASE_URL } from '../envars'; +export const API_PARTICIPANT_MEMBER_ROLE_NAME = 'api-participant-member'; + export const queryUsersByEmail = async (kcAdminClient: KeycloakAdminClient, email: string) => { return kcAdminClient.users.find({ email, @@ -110,11 +112,10 @@ const assignClientRoleToUser = async ( }); }; -export const API_PARTICIPANT_MEMBER = 'api-participant-member'; - export const assignApiParticipantMemberRole = async ( kcAdminClient: KeycloakAdminClient, userEmail: string ) => { - await assignClientRoleToUser(kcAdminClient, userEmail, API_PARTICIPANT_MEMBER); + await assignClientRoleToUser(kcAdminClient, userEmail, API_PARTICIPANT_MEMBER_ROLE_NAME); +}; };