fix: add support for authentik groups in allowedRoles

Nexirift · Apr 15, 2024 · 263befd · 263befd
1 parent 82ec5fc
commit 263befd
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/src/plugin.ts b/src/plugin.ts
@@ -143,7 +143,9 @@ export function useOIDC(options: OIDCPluginOptions): Plugin {
 
 				// Check if the token has the necessary roles
 				if (allowedRoles && allowedRoles.length > 0) {
-					const roles = JSON.parse(ct).realm_access.roles;
+					const roles =
+						JSON.parse(ct).realm_access.roles ||
+						JSON.parse(ct).groups;
 					if (
 						!roles.some((role: string) =>
 							allowedRoles.includes(role)