Merge pull request #125 from NHSDigital/dev/NPA-3627_Pass_Through_Id_Token

NPA-3627 Pass Through VOT Header

Author: JackPlowman

…icies/AssignMessage.AddUserAuthLevel.xml …ies/AssignMessage.AddUserAuthHeaders.xmlproxies/live/apiproxy/policies/AssignMessage.AddUserAuthLevel.xml renamed to proxies/live/apiproxy/policies/AssignMessage.AddUserAuthHeaders.xml proxies/live/apiproxy/policies/AssignMessage.AddUserAuthLevel.xml renamed to proxies/live/apiproxy/policies/AssignMessage.AddUserAuthHeaders.xml

@@ -1,11 +1,13 @@
 <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
-<AssignMessage async="false" continueOnError="false" enabled="true" name="AddUserAuthLevel">
-    <DisplayName>Add User Auth Level</DisplayName>
+<AssignMessage async="false" continueOnError="false" enabled="true" name="AddUserAuthHeaders">
+    <DisplayName>Add User Auth Headers</DisplayName>
     <Add>
         <Headers>
             <Header name="accesstoken.auth_level">{toUpperCase(accesstoken.auth_level)}</Header>
+            <Header name="accesstoken.auth_user_id">{accesstoken.auth_user_id}</Header>
+            <Header name="accesstoken.auth_vot">{jwt.DecodeAccessTokenJWT.claim.vot}</Header>
         </Headers>
     </Add>
     <IgnoreUnresolvedVariables>true</IgnoreUnresolvedVariables>
     <AssignTo createNew="false" transport="http" type="request"/>
-</AssignMessage>
+</AssignMessage>

proxies/live/apiproxy/policies/AssignMessage.AddUserIdHeader.xml

@@ -0,0 +1,4 @@
+<DecodeJWT async="false" continueOnError="false" enabled="true" name="DecodeAccessTokenJWT">
+  <DisplayName>DecodeAccessTokenJWT</DisplayName>
+  <Source>accesstoken.id_token</Source>
+</DecodeJWT>

proxies/live/apiproxy/policies/AssignMessage.AddUserNHSNumber.xml

@@ -15,10 +15,10 @@
                 <Name>AddProxyURL</Name>
             </Step>
             <Step>
-                <Name>AddUserAuthLevel</Name>
+                <Name>DecodeAccessTokenJWT</Name>
             </Step>
             <Step>
-                <Name>AddUserNHSNumber</Name>
+                <Name>AddUserAuthHeaders</Name>
             </Step>
             <Step>
                 <Name>RaiseFault.415UnsupportedMediaType</Name>