Permissions for users
Feature Description
It should be possible to add single permissions to users and not only roles. One use case: You have moderators and admins as roles. You want that an endpoint can be accessed by users that have the role moderator or admin. Currently, it is only possible by validating the JWT token without specific roles and afterwards looping through the roles in the claims.
Describe the solution you'd like
You can assign permissions to users. When validating the JWT token, it should be possible to specify permissions. It can be handled, like Auth0 does it. In Auth0 you can create permissions and roles. You can assign permissions to a role. When assigning a role to a user, the user receives all permissions of the role,