mod_groups_oidc/mod_groups_oidc.lua
author Kim Alvefur <zash@zash.se>
Sat, 23 Mar 2024 15:44:13 +0100
changeset 5878 f8b9095f7862
parent 5508 7d9dce4e7dd0
permissions -rw-r--r--
mod_compat_roles: Fix attempt to index a nil value #1847 permissions[] is not a map with role names as keys since 817bc9873fc2 but instead a level with host names were added. This was likely an oversight. Refactored towards railroad.

local array = require "util.array";

module:add_item("openid-claim", "groups");

local group_memberships = module:open_store("groups", "map");
local function user_groups(username)
	return pairs(group_memberships:get_all(username) or {});
end

module:hook("token/userinfo", function(event)
	local userinfo = event.userinfo;
	if event.claims:contains("groups") then
		userinfo.groups = array(user_groups(event.username));
	end
end);