{"action":"created","issue":{"url":"https://api.github.com/repos/TykTechnologies/tyk/issues/1552","repository_url":"https://api.github.com/repos/TykTechnologies/tyk","labels_url":"https://api.github.com/repos/TykTechnologies/tyk/issues/1552/labels{/name}","comments_url":"https://api.github.com/repos/TykTechnologies/tyk/issues/1552/comments","events_url":"https://api.github.com/repos/TykTechnologies/tyk/issues/1552/events","html_url":"https://github.com/TykTechnologies/tyk/issues/1552","id":306933330,"number":1552,"title":"JWT's with existing sub claim cannot access new APIs added to the policy","user":{"login":"LuanvP","id":28846119,"avatar_url":"https://avatars1.githubusercontent.com/u/28846119?v=4","gravatar_id":"","url":"https://api.github.com/users/LuanvP","html_url":"https://github.com/LuanvP","followers_url":"https://api.github.com/users/LuanvP/followers","following_url":"https://api.github.com/users/LuanvP/following{/other_user}","gists_url":"https://api.github.com/users/LuanvP/gists{/gist_id}","starred_url":"https://api.github.com/users/LuanvP/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/LuanvP/subscriptions","organizations_url":"https://api.github.com/users/LuanvP/orgs","repos_url":"https://api.github.com/users/LuanvP/repos","events_url":"https://api.github.com/users/LuanvP/events{/privacy}","received_events_url":"https://api.github.com/users/LuanvP/received_events","type":"User","site_admin":false},"labels":[{"id":97816682,"url":"https://api.github.com/repos/TykTechnologies/tyk/labels/bug","name":"bug","color":"fc2929","default":true}],"state":"open","locked":false,"assignee":{"login":"dencoded","id":33698537,"avatar_url":"https://avatars1.githubusercontent.com/u/33698537?v=4","gravatar_id":"","url":"https://api.github.com/users/dencoded","html_url":"https://github.com/dencoded","followers_url":"https://api.github.com/users/dencoded/followers","following_url":"https://api.github.com/users/dencoded/following{/other_user}","gists_url":"https://api.github.com/users/dencoded/gists{/gist_id}","starred_url":"https://api.github.com/users/dencoded/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dencoded/subscriptions","organizations_url":"https://api.github.com/users/dencoded/orgs","repos_url":"https://api.github.com/users/dencoded/repos","events_url":"https://api.github.com/users/dencoded/events{/privacy}","received_events_url":"https://api.github.com/users/dencoded/received_events","type":"User","site_admin":false},"assignees":[{"login":"dencoded","id":33698537,"avatar_url":"https://avatars1.githubusercontent.com/u/33698537?v=4","gravatar_id":"","url":"https://api.github.com/users/dencoded","html_url":"https://github.com/dencoded","followers_url":"https://api.github.com/users/dencoded/followers","following_url":"https://api.github.com/users/dencoded/following{/other_user}","gists_url":"https://api.github.com/users/dencoded/gists{/gist_id}","starred_url":"https://api.github.com/users/dencoded/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dencoded/subscriptions","organizations_url":"https://api.github.com/users/dencoded/orgs","repos_url":"https://api.github.com/users/dencoded/repos","events_url":"https://api.github.com/users/dencoded/events{/privacy}","received_events_url":"https://api.github.com/users/dencoded/received_events","type":"User","site_admin":false}],"milestone":null,"comments":1,"created_at":"2018-03-20T16:08:04Z","updated_at":"2018-03-20T17:37:24Z","closed_at":null,"author_association":"CONTRIBUTOR","body":"**Do you want to request a *feature* or report a *bug*?**\r\nBug, related https://github.com/TykTechnologies/tyk/issues/1379\r\n\r\n**What is the current behavior?**\r\nJWT's with a sub claim that has been used before cannot access new APIs added to the policy they reference. They can continue to access old APIs, and if the sub claim is changed they can access the new APIs on the policy.\r\n\r\n**What is the expected behavior?**\r\nJWT should have access to the new API added to the policy\r\n\r\n**If the current behavior is a bug, please provide the steps to reproduce and if possible a minimal demo of the problem**\r\n\r\n- Create API with JWT validation\r\n- Add API to policy\r\n- Call API with new JWT referencing that policy\r\n- Create new API with JWT validation and add to policy\r\n- Call new API with JWT using same \"sub\" claim as before\r\n- Returns: \r\n{\r\n“error”: “Access to this API has been disallowed”\r\n}\r\n"},"comment":{"url":"https://api.github.com/repos/TykTechnologies/tyk/issues/comments/374689344","html_url":"https://github.com/TykTechnologies/tyk/issues/1552#issuecomment-374689344","issue_url":"https://api.github.com/repos/TykTechnologies/tyk/issues/1552","id":374689344,"user":{"login":"LuanvP","id":28846119,"avatar_url":"https://avatars1.githubusercontent.com/u/28846119?v=4","gravatar_id":"","url":"https://api.github.com/users/LuanvP","html_url":"https://github.com/LuanvP","followers_url":"https://api.github.com/users/LuanvP/followers","following_url":"https://api.github.com/users/LuanvP/following{/other_user}","gists_url":"https://api.github.com/users/LuanvP/gists{/gist_id}","starred_url":"https://api.github.com/users/LuanvP/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/LuanvP/subscriptions","organizations_url":"https://api.github.com/users/LuanvP/orgs","repos_url":"https://api.github.com/users/LuanvP/repos","events_url":"https://api.github.com/users/LuanvP/events{/privacy}","received_events_url":"https://api.github.com/users/LuanvP/received_events","type":"User","site_admin":false},"created_at":"2018-03-20T17:37:24Z","updated_at":"2018-03-20T17:37:24Z","author_association":"CONTRIBUTOR","body":"@ilijabojanovic Yes with enforced access rights it works. Still a bug? Or expected behaviour?"}}
{"actor":{"display_login":"LuanvP"}}