feat: Add OIDC_USER_CLAIM (#3422)

* feat: Add OIDC_USER_CLAIM

* fix: add validation
This commit is contained in:
tba-code
2024-04-04 16:16:54 -05:00
committed by GitHub
parent fa9a2d64f7
commit 1099e30a1d
3 changed files with 6 additions and 2 deletions

View File

@@ -34,7 +34,7 @@ class OpenIDProvider(AuthProvider[OIDCRequest]):
repos = get_repositories(self.session)
user = self.try_get_user(claims.get("email"))
user = self.try_get_user(claims.get(settings.OIDC_USER_CLAIM))
group_claim = claims.get("groups", [])
is_admin = settings.OIDC_ADMIN_GROUP in group_claim if settings.OIDC_ADMIN_GROUP else False
is_valid_user = settings.OIDC_USER_GROUP in group_claim if settings.OIDC_USER_GROUP else True