Skip to content

Conversation

@hahahannes
Copy link
Contributor

@hahahannes hahahannes commented Jan 8, 2025

In some use cases the OIDC_GROUPS_ATTRIBUTE token field is stored in the access token and not in the user id token. This will also check within the access token.

This will close #43

@hahahannes
Copy link
Contributor Author

What do you think about this @kharkevich ? Similar to the other user, we have the case where the groups value is placed in the access token itself and not in the user id token.

@hahahannes hahahannes changed the title check access token for group membership; fix https://github.com/data-… feat: check access token for group membership Feb 21, 2025
@hahahannes
Copy link
Contributor Author

I realized that I should use the authlib and not the jwt package. Will change

@hahahannes hahahannes force-pushed the group_access_token branch 2 times, most recently from 760db81 to 1b2bb11 Compare February 26, 2025 19:04
@hahahannes
Copy link
Contributor Author

@kharkevich Ready for review :)

@hahahannes
Copy link
Contributor Author

@kharkevich Any thoughts about this? I can also add tests in case this feature seems interesting.

@kharkevich
Copy link
Member

hi @hahahannes, could you please update your PR, resolve conflicts and add unit tests

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Check Access Token for OIDC_GROUPS_ATTRIBUTE

2 participants