feat: Add global administrator role support with integration tests for admin-only club endpoints.

2026-03-18 15:11:42 +01:00
parent d295c9123e
commit 04641319ce
6 changed files with 77 additions and 2 deletions
@@ -54,6 +54,14 @@ public class ClubRoleClaimsTransformation : IClaimsTransformation
            return Task.FromResult(principal);
        }

+        // --- NEW: Skip DB role lookup if user is a global admin ---
+        var realmAccess = principal.FindFirst("realm_access")?.Value;
+        if (!string.IsNullOrEmpty(realmAccess) && realmAccess.Contains("\"admin\"", StringComparison.OrdinalIgnoreCase))
+        {
+            return Task.FromResult(principal);
+        }
+        // ---------------------------------------------------------
+
        // Look up the user's role in the database for the requested tenant
        _httpContextAccessor.HttpContext!.Items["TenantId"] = tenantId;
        var memberRole = GetMemberRole(userIdClaim, tenantId);