diff options
Diffstat (limited to 'internal/api/auth')
| -rw-r--r-- | internal/api/auth/callback.go | 9 |
1 files changed, 7 insertions, 2 deletions
diff --git a/internal/api/auth/callback.go b/internal/api/auth/callback.go index bef7b013f..5f0425dea 100644 --- a/internal/api/auth/callback.go +++ b/internal/api/auth/callback.go @@ -284,10 +284,15 @@ func (m *Module) createUserFromOIDC(ctx context.Context, claims *oidc.Claims, ex } // check if the user is in any recognised admin groups + adminGroups := config.GetOIDCAdminGroups() var admin bool +LOOP: for _, g := range claims.Groups { - if strings.EqualFold(g, "admin") || strings.EqualFold(g, "admins") { - admin = true + for _, ag := range adminGroups { + if strings.EqualFold(g, ag) { + admin = true + break LOOP + } } } |