## Why Roles are free-form strings with no permissions behind them, so every app reinvents authorization. ## What - Define permissions; map roles to permissions - Permissions in the access token (or resolvable through an endpoint when large) - Admin API for roles and permissions, audited ## Done when Apps can authorize on permissions issued by Seamless Auth.
Activity
feat(permissions): map roles to permissions and carry them in the acc…