[PR #1491] feat: add support for syncing OIDC claims with user groups #26097

New Issue

GiteaMirror · 2026-06-21T23:23:33-05:00

GiteaMirror commented

2026-06-21 23:23:33 -05:00

📋 Pull Request Information

Original PR: https://github.com/moghtech/komodo/pull/1491
Author: @Asleep123
Created: 6/21/2026
Status: 🔄 Open

Base: main ← Head: oidc-group-sync

📝 Commits (1)

b64d457 feat: add support for syncing OIDC claims with user groups

📊 Changes

7 files changed (+265 additions, -4 deletions)

View changed files

📝 bin/core/src/auth/mod.rs (+182 -3)
📝 bin/core/src/config.rs (+9 -0)
📝 client/core/rs/src/entities/config/core.rs (+38 -0)
📝 client/core/rs/src/entities/user.rs (+6 -0)
📝 client/core/ts/src/types.ts (+5 -0)
📝 config/core.config.toml (+20 -1)
📝 ui/public/client/types.d.ts (+5 -0)

📄 Description

Adds support to automatically add (and optionally create) user groups to users in Komodo using OIDC claim data.

This requires an update to the underlying auth server Komodo uses. Upon the merge of this PR, this PR will be updated with the new release version and undrafted.

Config shape:

  ## Sync Komodo User Group memberships from an OIDC claim on every OIDC login.
  ## Only memberships previously synced from OIDC are removed when claims change.
  oidc_sync_user_groups = false

  ## OIDC claim used for User Group sync.
  ## Supports an array of strings, a single string, or a dotted path like
  `realm_access.roles`.
  oidc_sync_user_groups_claim = "groups"

  ## Create Komodo User Groups found in OIDC claims when they do not exist.
  ## When false, only existing Komodo User Groups are synced.
  oidc_sync_user_groups_auto_create = false

Closes: #667, #1251

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/moghtech/komodo/pull/1491 **Author:** [@Asleep123](https://github.com/Asleep123) **Created:** 6/21/2026 **Status:** 🔄 Open **Base:** `main` ← **Head:** `oidc-group-sync` --- ### 📝 Commits (1) - [`b64d457`](https://github.com/moghtech/komodo/commit/b64d457eeee38f8996432e5442a0e1d9b81e6c46) feat: add support for syncing OIDC claims with user groups ### 📊 Changes **7 files changed** (+265 additions, -4 deletions) <details> <summary>View changed files</summary> 📝 `bin/core/src/auth/mod.rs` (+182 -3) 📝 `bin/core/src/config.rs` (+9 -0) 📝 `client/core/rs/src/entities/config/core.rs` (+38 -0) 📝 `client/core/rs/src/entities/user.rs` (+6 -0) 📝 `client/core/ts/src/types.ts` (+5 -0) 📝 `config/core.config.toml` (+20 -1) 📝 `ui/public/client/types.d.ts` (+5 -0) </details> ### 📄 Description Adds support to automatically add (and optionally create) user groups to users in Komodo using OIDC claim data. This requires an update to the underlying auth server Komodo uses. Upon the merge of [this PR](https://github.com/moghtech/lib/pull/6), this PR will be updated with the new release version and undrafted. Config shape: ``` ## Sync Komodo User Group memberships from an OIDC claim on every OIDC login. ## Only memberships previously synced from OIDC are removed when claims change. oidc_sync_user_groups = false ## OIDC claim used for User Group sync. ## Supports an array of strings, a single string, or a dotted path like `realm_access.roles`. oidc_sync_user_groups_claim = "groups" ## Create Komodo User Groups found in OIDC claims when they do not exist. ## When false, only existing Komodo User Groups are synced. oidc_sync_user_groups_auto_create = false ``` Closes: #667, #1251 --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

GiteaMirror added the pull-request label 2026-06-21 23:23:33 -05:00

Sign in to join this conversation.

Branches Tags

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/komodo#26097