dont include groups in JWT

2026-04-21 14:54:19 +10:00
parent 35840697fa
commit fb7e9bdca4
3 changed files with 20 additions and 4 deletions
@@ -217,7 +217,7 @@ func (h *Handler) AuthLogin(w http.ResponseWriter, r *http.Request) {
 	if subject == "" {
 		subject = username
 	}
-	token, claims, err := jwtSvc.IssueToken(subject, roles, identity.Groups)
+	token, claims, err := jwtSvc.IssueToken(subject, roles, nil)
 	if err != nil {
 		h.Logger.Error("failed to issue auth token", "username", username, "error", err)
 		audit.LogAuthEvent(h.Logger, r, "login", "error", "reason", "token_issue_failed", "username", username, "error", err)