Requirement4 - ABAC

Author: Pigius

backend/auth.yaml

@@ -25,6 +25,10 @@ Resources:
           AttributeDataType: String
           Mutable: true
           Required: false
+        - Name: yearsAsMember
+          AttributeDataType: Number
+          Mutable: true
+          Required: false
 
   UserPoolClient:
     Type: AWS::Cognito::UserPoolClient

backend/layers/shared.py

@@ -60,7 +60,8 @@ def get_user_claims(jwt_token):
 
     claims = {
         "username": verified_claims.get("cognito:username"),
-        "role":  verified_claims.get("custom:role")
+        "role":  verified_claims.get("custom:role"),
+        "canSeeBestsellers": verified_claims.get("custom:canSeeBestsellers")
     }
     print("claims", claims)