Remove unused claims

Author: godefroy-le-hardi

src/Security/Auth/TokenService.php

@@ -70,9 +70,7 @@ public function generateToken(ApiUser $user): string
             ->identifiedBy(bin2hex(random_bytes(16)))
             ->issuedAt($now)
             ->expiresAt($now->modify(sprintf('+%d seconds', $this->expirationSeconds)))
-            ->withClaim('uid', $user->getUserId())
             ->withClaim('username', $user->getUserIdentifier())
-            ->withClaim('roles', $user->getRoles())
             ->getToken($this->config->signer(), $this->config->signingKey());
 
         return $token->toString();

tests/Unit/Security/TokenServiceTest.php

@@ -58,9 +58,9 @@ public function testGenerateTokenWithAdminRole(): void
 
         $parsedToken = $this->tokenService->parseToken($token);
 
-        $this->assertSame('admin123', $parsedToken->claims()->get('uid'));
         $this->assertSame('admin@example.com', $parsedToken->claims()->get('username'));
-        $this->assertSame(['ROLE_USER', 'ROLE_ADMIN'], $parsedToken->claims()->get('roles'));
+        $this->assertFalse($parsedToken->claims()->has('uid'));
+        $this->assertFalse($parsedToken->claims()->has('roles'));
     }
 
     public function testParseValidToken(): void
@@ -70,9 +70,7 @@ public function testParseValidToken(): void
         $token = $this->tokenService->generateToken($user);
         $parsedToken = $this->tokenService->parseToken($token);
 
-        $this->assertSame('user456', $parsedToken->claims()->get('uid'));
         $this->assertSame('user@example.com', $parsedToken->claims()->get('username'));
-        $this->assertSame(['ROLE_USER'], $parsedToken->claims()->get('roles'));
     }
 
     public function testParseInvalidToken(): void
@@ -208,9 +206,7 @@ public function testParseExpiredToken(): void
             ->identifiedBy(bin2hex(random_bytes(16)))
             ->issuedAt($now->modify('-2 hours'))
             ->expiresAt($now->modify('-1 hour'))
-            ->withClaim('uid', 'user123')
             ->withClaim('username', 'test@example.com')
-            ->withClaim('roles', ['ROLE_USER'])
             ->getToken($config->signer(), $config->signingKey())
             ->toString();