ApiClient plain class

api_client.js

class ApiClient {
  constructor(jwt) {
    // parse + verify jwt
    // set properties based on jwt claims
  }

  user() {
    if (this.user_id) {
      return towerRequest(USER_INFO, { user_id: this.user_id });
    } else {
      return null;
    }
  }

  rolesFor(context) {
    // filter roles in jwt to those that apply to a given context
    // (organization, network, community, etc)
  }

  permittedTo(operation, context) {
    return this.rolesFor(context).some(role => {
      roleConfig[role].operations.include(operation);
    });
  }
}

jwt.js

{
  "aud": "https://api.{org}.usechorus.com",
  "iss": "https://login.usechorus.com",
  "full_name": "Blake Thomson",
  "https://usechorus.com/user_id": 12345,
  "https://usechorus.com/roles": {
    "global": [
      "role_a",
      "role_b",
    ],
    "network:123": [
      "role_f"
    ],
    "community:456": [
      "role_c",
      "role_d"
    ],
  }
}