AccessTokenResolver validateToken withRolesAndPermissions fails to add roles and permissions

[dan-foresight]

Lines 53 through 58 in access-token-resolver.ts has what appears to be a bug. The entity without roles and permissions is listed to the right in the spread operator compared to the result of this.getEntity(entity) (which has the roles and permissions). This causes the result to NOT have the roles and permissions.

return { ...(entityWithRoles || ( options?.withRolesAndPermissions ? await this.getEntity(entity) : {} )), ...entity };

I've tested the following code which seems to work:

return { ...entity, ...(entityWithRoles || ( options?.withRolesAndPermissions ? await this.getEntity(entity) : {} )) };

[saitishmukhametov]

bump, still valid and forces manual api calls