handle array claims

Signed-off-by: Robert Landers <landers.robert@gmail.com>

Author: withinboredom

cli/auth/keys.go

@@ -114,7 +114,7 @@ func ExtractUser(r *http.Request, config *config.Config) (user *User, ok bool) {
 // The token is signed using the active secret key from the config.
 // The token will expire in 72 hours and is valid starting from 5 minutes ago.
 // Returns the signed token string or an error if the signing process fails.
-func CreateUser(userId UserId, role []Role, claims map[string]string, config *config.Config) (string, error) {
+func CreateUser(userId UserId, role []Role, claims map[string]interface{}, config *config.Config) (string, error) {
 	claimMap := jwt.MapClaims{
 		"sub":   userId,
 		"exp":   time.Now().Add(72 * time.Hour).Unix(),
@@ -125,7 +125,6 @@ func CreateUser(userId UserId, role []Role, claims map[string]string, config *co
 
 	for k, v := range claims {
 		k = strings.TrimSpace(k)
-		v = strings.TrimSpace(v)
 		claimMap[k] = v
 	}
 

cli/cli.go

@@ -548,15 +548,19 @@ func main() {
 				rol = append(rol, auth.Role(role))
 			}
 
-			extraClaims := make(map[string]string)
+			extraClaims := make(map[string]interface{})
 			if options["claims"] != "" {
 				claims := strings.Split(options["claims"], ";")
 				for _, claim := range claims {
 					kv := strings.Split(claim, ":")
 					if len(kv) != 2 {
 						panic(fmt.Errorf("invalid claim: %s", claim))
 					}
-					extraClaims[kv[0]] = kv[1]
+					if strings.Contains(kv[1], ",") {
+						extraClaims[kv[0]] = strings.Split(strings.TrimSpace(kv[1]), ",")
+					} else {
+						extraClaims[kv[0]] = strings.TrimSpace(kv[1])
+					}
 				}
 			}