in src/RBACHandler.ts [49:60]
async verifyAccessToken(request: VerifyAccessTokenRequest): Promise<KeyValueMap> {
const decoded = decode(request.accessToken, { json: true }) ?? {};
const groups: string[] = decoded['cognito:groups'] ?? [];
if (request.bulkDataAuth) {
this.isBulkDataAccessAllowed(groups, request.bulkDataAuth);
return decoded;
}
this.isAllowed(groups, request.operation, request.resourceType);
return decoded;
}