I'm sending the session token to my python backend...
# ask-a-descopers
steep-keyboard-7095
05/02/2023, 2:26 AMI'm sending the session token to my python backend and I want to extract from the jwt_response (after the descope_client.validate_session call) the tenant id, user id, and the user's role. What's the syntax for that?
b
breezy-evening-56597
05/02/2023, 2:29 AM
Wesley - have a look here: https://docs.descope.com/build/guides/session/#Python
breezy-evening-56597
05/02/2023, 2:29 AM
Copy code
jwt_response = descope_client.validate_session(session_token=session_token)breezy-evening-56597
05/02/2023, 2:30 AM
Also tagging @salmon-night-88354 that played with this in Python
f
faint-musician-4508
05/02/2023, 2:35 AM
This is the exact part of the doc - https://docs.descope.com/build/guides/session/#validating-roles-and-permissions
s
steep-keyboard-7095
05/02/2023, 2:35 AMThanks, I see that I can validate if I already have those IDs, but I want to get all of those IDs after they've authenticated from descope
f
faint-musician-4508
05/02/2023, 2:36 AM
Oh if you want to get all those rather than validate whether a role exists, then you should be able to access that in the jwt_response. It is a dict. Did you try printing that. I dont remember exact syntax but it is returned in a dict (I think).
s
steep-keyboard-7095
05/02/2023, 2:37 AMYeah, it should be a dict, but I wanted to see what the keys were, I haven't gotten to the point where I've successfully validated it (Still working on backend stuff) so I haven't printed it, but I can do that if nobody knows
f
faint-musician-4508
05/02/2023, 2:40 AM
let me get that
s
steep-keyboard-7095
05/02/2023, 2:40 AMThanks Rishi
b
breezy-evening-56597
05/02/2023, 2:48 AM
Wesley, the validate will return the jwt as a JSON.
breezy-evening-56597
05/02/2023, 2:49 AM
The hierarchy will be:
Copy code
tenants: [
"<tenant ID>": {
"permissions":[
"<Permission name>",
...
],
"roles": [
"<Role name>",
...
]
},
...
]breezy-evening-56597
05/02/2023, 2:51 AM
@salmon-night-88354 worth adding this to the doc itself
f
faint-musician-4508
05/02/2023, 2:51 AM
Copy code
const jwt = await descopeClient.validateSession(session_token);
Object.keys(jwt.token.tenants || []).forEach((tenantId) => {
roles = roles.concat(jwt.token.tenants[tenantId].roles);
});b
breezy-evening-56597
05/02/2023, 2:52 AM
userId will also be there as part of the
subs
steep-keyboard-7095
05/02/2023, 1:55 PMThanks for the detail!
So jwt.token.sub for the userID?
And for the tenants, it looks like you could potentially have one user under multiple tenants, correct?
f
faint-musician-4508
05/02/2023, 2:19 PM
Yes. A user can be part of more than one tenant
✅ 1
s
steep-keyboard-7095
05/02/2023, 2:53 PMCool.
Also, I just realized that my cookie retrieval code didn't work. What is the name of the session and refesh token cookie?
f
faint-musician-4508
05/02/2023, 2:55 PM
DS and DSR