rework policies to use permissions over roles

api/src/Services/JwtService.cs

@@ -31,21 +31,22 @@ public class JwtService {
 
         if(user.UserName == null) return null;
 
-        var roles = await userManager_.GetRolesAsync(user);
-
         // not too sure
         var claims = new List<Claim> {
             new Claim(ClaimTypes.Name, user.UserName),
             new Claim(ClaimTypes.NameIdentifier, user.Id.ToString())
         };
 
-        claims.AddRange(roles.Select(role => new Claim(ClaimTypes.Role, role)));
+        List<string> permissions = user.Permissions;
+        foreach(var perm in permissions) {
+            claims.Add(new Claim("permission", perm));
+        }
 
         var token = new JwtSecurityToken(
             issuer: "agologum",
             audience: "agologum",
             claims: claims,
-            expires: DateTime.UtcNow.AddHours(2), // will add a refresher later
+            expires: DateTime.UtcNow.AddHours(2),
             signingCredentials: creds
         );