lib/openc3/utilities/authorization.rb in openc3-5.4.2 vs lib/openc3/utilities/authorization.rb in openc3-5.4.3.pre.beta0
- old
+ new
@@ -15,11 +15,11 @@
# Modified by OpenC3, Inc.
# All changes Copyright 2022, OpenC3, Inc.
# All Rights Reserved
#
-# This file may also be used under the terms of a commercial license
+# This file may also be used under the terms of a commercial license
# if purchased from OpenC3, Inc.
require 'openc3/models/auth_model'
begin
@@ -40,10 +40,12 @@
def authorize(permission: nil, target_name: nil, packet_name: nil, interface_name: nil, router_name: nil, scope: nil, token: nil)
raise AuthError.new("Scope is required") unless scope
if $openc3_authorize
raise AuthError.new("Token is required") unless token
- raise AuthError.new("Token is invalid for '#{permission}' permission") unless OpenC3::AuthModel.verify(token, permission: permission)
+ unless OpenC3::AuthModel.verify(token, permission: permission)
+ raise AuthError.new("Current role is invalid for '#{permission}' permission")
+ end
end
end
def user_info(_token)
{} # EE does stuff here