From 7b60ac90e3563da41960361d119b2d4d11fa3eb7 Mon Sep 17 00:00:00 2001 From: Vitor Date: Wed, 27 Dec 2023 18:37:52 +0000 Subject: [PATCH] Corrects OIDC group parsing in case userinfo_endpoint is not OIDC compliant Signed-off-by: Vitor --- src/pkg/oidc/helper.go | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/pkg/oidc/helper.go b/src/pkg/oidc/helper.go index a16c76307..8226fb2c6 100644 --- a/src/pkg/oidc/helper.go +++ b/src/pkg/oidc/helper.go @@ -403,6 +403,10 @@ func groupsFromClaims(gp claimsProvider, k string) ([]string, bool) { } res = append(res, s) } + // if remote.Groups is not a []string, but local.Groups is, this will create a fallback + if len(res) == 0 { + return res, false + } return res, true }