Purpose
Specification
Service logic
- Only authenticated and authorized user can use this service
- Service returns only employee roles related to the same legal entity as the user
Authentication
- Verify the validity of access token
- Return 401 in case validation fails
- Check scopes in order to perform this action (scope = 'employee_roles:read')
- Return 403 in case invalid scope(s)
Prepare response
Service returns only employee roles related to the same legal entity as the user
- Extract client_id from token
- Return entries filtered by client_id and query params