#!/bin/bash
# Check what roles are in the token

TOKEN="$1"

if [ -z "$TOKEN" ]; then
    echo "Usage: ./check-token-roles.sh YOUR_TOKEN"
    exit 1
fi

echo "🔍 Analyzing Token Roles..."
echo ""

# Decode JWT payload
PAYLOAD=$(echo $TOKEN | cut -d'.' -f2)
PADDED=$(printf '%s' "$PAYLOAD" | sed 's/-/+/g; s/_/\//g')

echo "Token Claims:"
echo "$PADDED===" | base64 -d 2>/dev/null | jq '.'

echo ""
echo "Roles in token:"
echo "$PADDED===" | base64 -d 2>/dev/null | jq -r '.realm_access.roles[]' 2>/dev/null || echo "No roles found in realm_access.roles"