Access groups from payload

Dockerfile

@@ -13,7 +13,7 @@ USER node
 RUN npm install glob rimraf
 RUN npm install
 
-FROM node:16-alpine AS builder 
+FROM node:16-alpine AS builder
 
 # Prepare app directory
 WORKDIR /usr/src/app

src/auth/access-group-provider/access-group-from-payload.service.ts

@@ -33,7 +33,7 @@ export class AccessGroupFromPayloadService extends AccessGroupService {
     }
 
     Logger.log(
-      "ESS access groups getESSAccessGroupService : " + accessGroups.join(","),
+      "Access groups AccessGroupFromPayloadService : " + accessGroups.join(","),
     );
     return accessGroups;
   }

src/auth/strategies/oidc.strategy.ts

@@ -63,12 +63,15 @@ export class OidcStrategy extends PassportStrategy(Strategy, "oidc") {
 
   async validate(tokenset: TokenSet): Promise<Omit<User, "password">> {
     const userinfo: UserinfoResponse = await this.client.userinfo(tokenset);
+    const oidcConfig = this.configService.get<OidcConfig>("oidc");
 
     const userProfile = this.parseUserInfo(userinfo);
     const userPayload: UserPayload = {
       userId: userProfile.id,
       username: userProfile.username,
       email: userProfile.email,
+      accessGroupProperty: oidcConfig?.accessGroupProperty,
+      payload: userinfo,
     };
     userProfile.accessGroups = await this.accessGroupService.getAccessGroups(
       userPayload,

src/config/configuration.ts

@@ -109,6 +109,7 @@ const configuration = () => {
       scope: process.env.OIDC_SCOPE, // Example: "openid profile email"
       successURL: process.env.OIDC_SUCCESS_URL, // Example: http://localhost:3000/explorer
       accessGroups: process.env.OIDC_ACCESS_GROUPS, // Example: None
+      accessGroupProperty: process.env.OIDC_ACCESS_GROUPS_PROPERTY, // Example: groups
       autoLogout: process.env.OIDC_AUTO_LOGOUT || false,
       returnURL: process.env.OIDC_RETURN_URL,
     },