[GH-ISSUE #806] Unable to get groups data of Google Authenticated user #1644

Closed
opened 2026-04-16 08:22:35 -05:00 by GiteaMirror · 4 comments
Owner

Originally created by @shaarif-khan on GitHub (May 30, 2025).
Original GitHub issue: https://github.com/fosrl/pangolin/issues/806

I am using Google as an Idp provider for pangoling, it works like a charm, but there is this issue I am facing while using Google Auth. I am unable to set authorisation policies based on groups info provided by google.

The information mentioned here about leveraging JMESPath and extract out group info from token and assign a role based on that doesn't work when using google auth.

I am unable to use this

contains(groups, 'admin') && 'Admin' || 'Member'

is there a way we can use groups info while using google auth as an Idp provider. if not, we should mention this limitation clearly in the documentation section of it.

Originally created by @shaarif-khan on GitHub (May 30, 2025). Original GitHub issue: https://github.com/fosrl/pangolin/issues/806 I am using Google as an Idp provider for pangoling, it works like a charm, but there is this issue I am facing while using Google Auth. I am unable to set authorisation policies based on groups info provided by google. The information mentioned [here](https://docs.fossorial.io/Pangolin/Identity%20Providers/auto-provision#:~:text=contains(groups%2C%20%27admin%27)%20%26%26%20%27Admin%27%20%7C%7C%20%27Member%27) about leveraging JMESPath and extract out group info from token and assign a role based on that doesn't work when using google auth. I am unable to use this > contains(groups, 'admin') && 'Admin' || 'Member' is there a way we can use groups info while using google auth as an Idp provider. if not, we should mention this limitation clearly in the documentation section of it.
GiteaMirror added the stale label 2026-04-16 08:22:35 -05:00
Author
Owner

@github-actions[bot] commented on GitHub (Jun 14, 2025):

This issue has been automatically marked as stale due to 14 days of inactivity. It will be closed in 14 days if no further activity occurs.

<!-- gh-comment-id:2972028181 --> @github-actions[bot] commented on GitHub (Jun 14, 2025): This issue has been automatically marked as stale due to 14 days of inactivity. It will be closed in 14 days if no further activity occurs.
Author
Owner

@miloschwartz commented on GitHub (Jun 15, 2025):

If you set the debug mode of Pangolin to debug and try to log in, it will print the full token payload response from Google which will show if you if the groups array exists and what it looks like. Might be provided as a different key in the payloaD?

<!-- gh-comment-id:2974328754 --> @miloschwartz commented on GitHub (Jun 15, 2025): If you set the debug mode of Pangolin to debug and try to log in, it will print the full token payload response from Google which will show if you if the groups array exists and what it looks like. Might be provided as a different key in the payloaD?
Author
Owner

@github-actions[bot] commented on GitHub (Jun 30, 2025):

This issue has been automatically marked as stale due to 14 days of inactivity. It will be closed in 14 days if no further activity occurs.

<!-- gh-comment-id:3017344883 --> @github-actions[bot] commented on GitHub (Jun 30, 2025): This issue has been automatically marked as stale due to 14 days of inactivity. It will be closed in 14 days if no further activity occurs.
Author
Owner

@github-actions[bot] commented on GitHub (Jul 14, 2025):

This issue has been automatically closed due to inactivity. If you believe this is still relevant, please open a new issue with up-to-date information.

<!-- gh-comment-id:3067434598 --> @github-actions[bot] commented on GitHub (Jul 14, 2025): This issue has been automatically closed due to inactivity. If you believe this is still relevant, please open a new issue with up-to-date information.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/pangolin#1644