mod_http_oauth2: Reuse JWT issuance time as substitute for auth time
Makes the token shorter. Since iat and auth_time are generated at about
the same time they would only differ by a few microseconds anyway.
local array = require "util.array";
module:add_item("openid-claim", "groups");
local group_memberships = module:open_store("groups", "map");
local function user_groups(username)
return pairs(group_memberships:get_all(username) or {});
end
module:hook("token/userinfo", function(event)
local userinfo = event.userinfo;
if event.claims:contains("groups") then
userinfo.groups = array(user_groups(event.username));
end
end);