I am using Google as an Idp provider for pangoling, it works like a charm, but there is this issue I am facing while using Google Auth. I am unable to set authorisation policies based on groups info provided by google.
The information mentioned here about leveraging JMESPath and extract out group info from token and assign a role based on that doesn't work when using google auth.
I am unable to use this
contains(groups, 'admin') && 'Admin' || 'Member'
is there a way we can use groups info while using google auth as an Idp provider. if not, we should mention this limitation clearly in the documentation section of it.
Originally created by @shaarif-khan on GitHub (May 30, 2025).
Original GitHub issue: https://github.com/fosrl/pangolin/issues/806
I am using Google as an Idp provider for pangoling, it works like a charm, but there is this issue I am facing while using Google Auth. I am unable to set authorisation policies based on groups info provided by google.
The information mentioned [here](https://docs.fossorial.io/Pangolin/Identity%20Providers/auto-provision#:~:text=contains(groups%2C%20%27admin%27)%20%26%26%20%27Admin%27%20%7C%7C%20%27Member%27) about leveraging JMESPath and extract out group info from token and assign a role based on that doesn't work when using google auth.
I am unable to use this
> contains(groups, 'admin') && 'Admin' || 'Member'
is there a way we can use groups info while using google auth as an Idp provider. if not, we should mention this limitation clearly in the documentation section of it.
@github-actions[bot] commented on GitHub (Jun 14, 2025):
This issue has been automatically marked as stale due to 14 days of inactivity. It will be closed in 14 days if no further activity occurs.
<!-- gh-comment-id:2972028181 -->
@github-actions[bot] commented on GitHub (Jun 14, 2025):
This issue has been automatically marked as stale due to 14 days of inactivity. It will be closed in 14 days if no further activity occurs.
If you set the debug mode of Pangolin to debug and try to log in, it will print the full token payload response from Google which will show if you if the groups array exists and what it looks like. Might be provided as a different key in the payloaD?
<!-- gh-comment-id:2974328754 -->
@miloschwartz commented on GitHub (Jun 15, 2025):
If you set the debug mode of Pangolin to debug and try to log in, it will print the full token payload response from Google which will show if you if the groups array exists and what it looks like. Might be provided as a different key in the payloaD?
@github-actions[bot] commented on GitHub (Jun 30, 2025):
This issue has been automatically marked as stale due to 14 days of inactivity. It will be closed in 14 days if no further activity occurs.
<!-- gh-comment-id:3017344883 -->
@github-actions[bot] commented on GitHub (Jun 30, 2025):
This issue has been automatically marked as stale due to 14 days of inactivity. It will be closed in 14 days if no further activity occurs.
@github-actions[bot] commented on GitHub (Jul 14, 2025):
This issue has been automatically closed due to inactivity. If you believe this is still relevant, please open a new issue with up-to-date information.
<!-- gh-comment-id:3067434598 -->
@github-actions[bot] commented on GitHub (Jul 14, 2025):
This issue has been automatically closed due to inactivity. If you believe this is still relevant, please open a new issue with up-to-date information.
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Originally created by @shaarif-khan on GitHub (May 30, 2025).
Original GitHub issue: https://github.com/fosrl/pangolin/issues/806
I am using Google as an Idp provider for pangoling, it works like a charm, but there is this issue I am facing while using Google Auth. I am unable to set authorisation policies based on groups info provided by google.
The information mentioned here about leveraging JMESPath and extract out group info from token and assign a role based on that doesn't work when using google auth.
I am unable to use this
is there a way we can use groups info while using google auth as an Idp provider. if not, we should mention this limitation clearly in the documentation section of it.
@github-actions[bot] commented on GitHub (Jun 14, 2025):
This issue has been automatically marked as stale due to 14 days of inactivity. It will be closed in 14 days if no further activity occurs.
@miloschwartz commented on GitHub (Jun 15, 2025):
If you set the debug mode of Pangolin to debug and try to log in, it will print the full token payload response from Google which will show if you if the groups array exists and what it looks like. Might be provided as a different key in the payloaD?
@github-actions[bot] commented on GitHub (Jun 30, 2025):
This issue has been automatically marked as stale due to 14 days of inactivity. It will be closed in 14 days if no further activity occurs.
@github-actions[bot] commented on GitHub (Jul 14, 2025):
This issue has been automatically closed due to inactivity. If you believe this is still relevant, please open a new issue with up-to-date information.