Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Mapping user groups to teams #1016

Open
ihard opened this issue Apr 26, 2024 · 0 comments
Open

Mapping user groups to teams #1016

ihard opened this issue Apr 26, 2024 · 0 comments
Labels

Comments

@ihard
Copy link

ihard commented Apr 26, 2024

Now it is possible to specify the x-webauth-user: user1 header and the user will be created.
I would also like to be able to place a user in the desired teams based on his group membership.
Groups can be passed in the x-webauth-teams header: moira_team1, moira_team2 - upon receiving such a header, the user will immediately be assigned to teams team1 and team2 - as an example.

For OIDC, groups are usually transmitted in the standard scope: groups , the data can be easily retrieved by an authorization proxy and inserted into the x-webauth-teams/x-webauth-groups header

For flexibility, it is proposed to make a configurable mapping of groups from the header to command identifiers, as an example:

teams:
    - id: team1
      group: moira_team1
    - id: team2
      group: moira_team2

@ihard ihard added the feature label Apr 26, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant