Add tracing

authmw/token.go

@@ -75,6 +75,7 @@ func VerifyToken(authURL string, permittedRoles []string) func(http.Handler) htt
 				_ = encoder.Encode(&errResp)
 				return
 			}
+			// TODO: Check that it is in permitted
 
 			// Add claims to request context
 			if claims, ok := token.Claims.(*auth.MicrofilmClaims); ok && token.Valid {