feat: set groups based on OIDC claim (#5568)

Co-authored-by: Nicolas Giard <github@ngpixel.com>
2022-09-06 00:40:54 +02:00
parent 31bd327487
commit 91221e73eb
2 changed files with 25 additions and 1 deletions
--- a/server/modules/authentication/oidc/authentication.js
+++ b/server/modules/authentication/oidc/authentication.js
@@ -29,6 +29,17 @@ module.exports = {
              email: _.get(profile, '_json.' + conf.emailClaim)
            }
          })
+          if (conf.mapGroups) {
+            const groups = _.get(profile, '_json.' + conf.groupsClaim)
+            if (groups) {
+              const groupIDs = Object.values(WIKI.auth.groups)
+                .filter(g => groups.includes(g.name))
+                .map(g => g.id)
+              for (let groupID of groupIDs) {
+                await user.$relatedQuery('groups').relate(groupID)
+              }
+            }
+          }
          cb(null, user)
        } catch (err) {
          cb(err, null)