Question Re: CAP Java: Update JWT token to fetch new roles in Technology Q&A

CAP Java: Update JWT token to fetch new roles

christoffer_fuss — Wed, 13 Oct 2021 18:02:24 GMT

Hello all,

we are developing a CAP Java application and are using the default XSUAA authentication with spring boot like described here. We have mapped a role collection via attribute mapping on SAP BTP. We have an API call which assigns this attribute to a user in our custom IDP.

We have the problem now, that the JWT is not changed after this API call and so not containing the new role.
Is there a way to update/renew the JWT or fetching a new JWT without forcing the user to relogin?

Best regards,

Chris

Re: CAP Java: Update JWT token to fetch new roles

gregorw — Wed, 13 Oct 2021 19:19:41 GMT

I think the only way to update the JWT is to ask the user to logout and login again.

Re: CAP Java: Update JWT token to fetch new roles

former_member129581 — Thu, 14 Oct 2021 07:52:40 GMT

Technically I could imagine this would be possible with the Refresh Token Flow, implicitly used by approuter.

But I have never tested whether roles / scopes contained in the JWT get updated.

Re: CAP Java: Update JWT token to fetch new roles

gregorw — Thu, 14 Oct 2021 14:17:00 GMT

Hi Alexander,

interresting thought. But do you think this would be also an option when using the managed approuter?

CU
Gregor

Re: CAP Java: Update JWT token to fetch new roles

former_member129581 — Fri, 15 Oct 2021 08:25:54 GMT

Hi Gregor, not sure, I would ask the question to approuter team 🙂

Re: CAP Java: Update JWT token to fetch new roles

christoffer_fuss — Sun, 17 Oct 2021 20:17:43 GMT

Thanks for helping. I will try it out and let you know the result 🙂

Best regards,

Chris