fix(NET-1540): add cfg to autoclose connections on rac, when logged out

only auto-disconnect non-admin users when JWT expires on RAC, and RAC_AUTO_DISABLE flag is set
gravitl · Sep 17, 2024 · 5347bdf · 5347bdf
1 parent 2e7d9ad
commit 5347bdf
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/logic/jwts.go b/logic/jwts.go
@@ -58,6 +58,7 @@ func CreateUserJWT(username string, role models.UserRoleID) (response string, er
 	claims := &models.UserClaims{
 		UserName: username,
 		Role:     role,
+		RacAutoDisable: (role != models.SuperAdminRole && role != models.AdminRole && servercfg.GetRacAutoDisable()),
 		RegisteredClaims: jwt.RegisteredClaims{
 			Issuer:    "Netmaker",
 			Subject:   fmt.Sprintf("user|%s", username),

diff --git a/models/user_mgmt.go b/models/user_mgmt.go
@@ -177,8 +177,9 @@ type UserAuthParams struct {
 
 // UserClaims - user claims struct
 type UserClaims struct {
-	Role     UserRoleID
-	UserName string
+	Role           UserRoleID
+	UserName       string
+	RacAutoDisable bool
 	jwt.RegisteredClaims
 }