Julien Lavocat b13f12dac0 Add extra claims to v1/identity/websocket-token (#3705) ...

# Description of Changes

Due to a limitation around passing headers to a WebSocket connection,
The typescript SDK rely on the endpoint `/v1/identity/websocket-token`
to get a new, short-lived token.
Currently, this endpoint strips all the other claims from the token and
only returns the following claims:

- `hex_identity`
- `sub`
- `iss`
- `aud`
- `iat`
- `exp`

This PR aims to fix this issue by introducing a new member field `extra`
to `SpacetimeIdentityClaims` and `TokenClaims` and letting serde do its
job.

# API and ABI breaking changes

None

# Expected complexity level and risk

2 - The change is trivial (1) but I'm not 100% familiar with all the
places where we would be signing a token (1).

# Testing

1. `curl` the endpoint and checking that the token returned contains all
the expected claims
2. Check that that the endpoint `v1/identity` still correctly issues and
identity and token

---------

Co-authored-by: Jeffrey Dallatezza <jeffreydallatezza@gmail.com>

2025-11-20 18:17:50 +00:00

..

src

Add extra claims to v1/identity/websocket-token (#3705)

2025-11-20 18:17:50 +00:00

Cargo.toml

Store client credentials in a new system table (#2983)

2025-09-19 15:39:45 +00:00

LICENSE

Update all licenses (#3002)

2025-08-12 18:20:58 +00:00