Group/Role mapping broken when not using user info endpoint

Created on 20 March 2024, 3 months ago

Problem/Motivation

The issue https://www.drupal.org/project/openid_connect_windows_aad/issues/3345637 🐛 Roles unassigned due to array to string conversion Active created a problem for configurations which are using mapping of groups to roles, but are not using an API endpoint to get group information; eg: groups are being returned via a claim.

Steps to reproduce

Use a configuration with 'Map user's AD groups to Drupal roles' enabled and 'Alternate or no user endpoint' enabled. The logic to map groups to roles does not fire.

Cause /resolution

This MR changes everything to look at 'aad_groups': https://git.drupalcode.org/project/openid_connect_windows_aad/-/commit/f...

Proposed solution is to still check for the presence of 'groups' which will still be processed correctly by the code. MR coming...

🐛 Bug report

Status

Needs review

Version

2.0

Component

Code

Created by

🇬🇧United Kingdom JKingsnorth

Live updates comments and jobs are added and updated live.

Merge Requests

!28Group/Role mapping broken when not using user info endpoint
Open
🇬🇧United Kingdom JKingsnorth
updated 3 months ago

Comments & Activities

Issue created by @JKingsnorth
Merge request !28#3432443 Fix group sync for userinfo via claim → (Open) created by JKingsnorth
Comment 3 months ago →
🇬🇧United Kingdom JKingsnorth
MR here: https://git.drupalcode.org/project/openid_connect_windows_aad/-/merge_re...
Status changed to Needs review 3 months ago4:16pm 20 March 2024
Comment 3 months ago →
🇬🇧United Kingdom JKingsnorth
JKingsnorth → changed the visibility of the branch 3432443-grouprole-mapping-broken to hidden.

contrib.social Blog FAQ Discussions

Production build 0.69.0 2024