Adds option to disable storing roles in the DB

This option defaults to 'true', which was the default behaviour before this change. When set to 'false', an empty array is stored instead of the actual roles.
365Werk · Feb 23, 2022 · b3d7093 · b3d7093
1 parent 2e576f3
commit b3d7093
Show file tree

Hide file tree

Showing 2 changed files with 19 additions and 4 deletions.
diff --git a/config/jwtauthroles.php b/config/jwtauthroles.php
@@ -6,6 +6,9 @@
     // If enabled, stores every user in the database
     'useDB' => env('FA_USE_DB', false),
 
+    // If enabled, stores the user's roles in the database
+    'storeRoles' => env('FA_STORE_ROLES', true),
+
     // Only if useDB = true
     // Column name in the users table where uuid should be stored.'
     'userId' => env('FA_USR_ID', 'uuid'),

diff --git a/src/JwtAuthRoles.php b/src/JwtAuthRoles.php
@@ -151,22 +151,34 @@ public static function authUser(object $request)
             if (config('jwtauthroles.autoCreateUser')) {
                 $user = JwtUser::firstOrNew([config('jwtauthroles.userId') => $claims->sub]);
                 $user[config('jwtauthroles.userId')] = $claims->sub;
-                $user->roles = json_encode($claims->roles);
+                if (config('jwtauthroles.storeRoles')){
+                    $user->roles = json_encode($claims->roles);
+                } else {
+                    $user->roles = json_encode(array());
+                }
                 $user->claims = json_encode($claims);
                 $user->save();
             } else {
                 $user = JwtUser::where(config('jwtauthroles.userId'), '=', $claims->sub)->firstOrFail();
-                $user->roles = json_encode($claims->roles);
+                if (config('jwtauthroles.storeRoles')){
+                    $user->roles = json_encode($claims->roles);
+                } else {
+                    $user->roles = json_encode(array());
+                }
                 $user->claims = json_encode($claims);
                 $user->save();
             }
         } else {
             $user = new JwtUser;
             $user->uuid = $claims->sub;
-            $user->roles = $claims->roles;
+            if (config('jwtauthroles.storeRoles')){
+                $user->roles = $claims->roles;
+            } else {
+                $user->roles = json_encode(array());
+            }
             $user->claims = $claims;
         }
 
         return $user;
     }
-}
+}