Role-based authorization for OpenID provider

[siriusfreak]

Hello.

Before reading the Contribution guide, I implemented a small change that allows to perform role-based authorization for OpenID provider.

Draft of pull request with changes: #1488

Do you think this change could be helpful?

[danny-avila]

Looks good to me, only qualm I have is adding the extra jwt package. Can you accomplish the same through the already installed package?

const jwt = require('jsonwebtoken');

[danny-avila]

And making sure OPENID functions as expected without ever setting the role variable