Checking roles about jwt-cpp HOT 3 CLOSED

I assume you want to make sure all of the roles you specify are present in the jwt?

There is no support for custom verification functions, however there have been thoughts about implementing something like that before.
You will have to check the content of the variable after you verified the token.
Example:

auto roles = decoded.get_payload_claim("roles").as_set();
std::set<std::string> required_roles = {"myRole1", "myRole2", "myRole3"};
for(auto & r : required_roles) {
	if(roles.count(r) == 0) {
		// Role missing
		// Fail the verification
	}
}
// Everything is fine

from jwt-cpp.

No, just if one of thoses roles is on the jwt

from jwt-cpp.

I post the solution here, like this you will get both solution, yours and mine.
In case of you want to check if your user got the right role, you can do this:

bool right = false;
auto roles = decoded_token.get_payload_claim("roles").as_set();
std::setstd::string required_roles = { "myRole1", "myRole2", "myRole3" };

for (auto & required_role : required_roles) { //On récupère tout les éléments du tableau
for (auto & role : roles) {

      if (required_role == role) {
	     right = true;
      }

}

}
if (right == false) {
// Role missing
// Fail the verification
// Your user don't have the right to access to this API for exemple
}

from jwt-cpp.