view mod_groups_oidc/mod_groups_oidc.lua @ 6502:b15601203d0d

mod_firewall: Support 'FROM IP' and 'FROM SUBNET' conditions
author Matthew Wild <mwild1@gmail.com>
date Thu, 26 Mar 2026 13:33:44 +0000
parents 486115e3b64d
children
line wrap: on
line source

local array = require "util.array";

module:add_item("openid-claim", { claim = "groups"; title = "User Groups";
	description = "List of group memberships"; });

local group_memberships = module:open_store("groups", "map");
local function user_groups(username)
	return pairs(group_memberships:get_all(username) or {});
end

module:hook("token/userinfo", function(event)
	local userinfo = event.userinfo;
	if event.claims:contains("groups") then
		userinfo.groups = array(user_groups(event.username));
	end
end);