Method ParseGroupClaims

enterprise/coderd/enidpsync/groups.go:21–30

ParseGroupClaims parses the user claims and handles deployment wide group behavior. Almost all behavior is deferred since each organization configures it's own group sync settings. GroupAllowList is implemented here to prevent login by unauthorized users. TODO: GroupAllowList overlaps with the defau

(ctx context.Context, mergedClaims jwt.MapClaims)

// GroupAllowList is implemented here to prevent login by unauthorized users.
// TODO: GroupAllowList overlaps with the default organization group sync settings.
func (e EnterpriseIDPSync) ParseGroupClaims(ctx context.Context, mergedClaims jwt.MapClaims) (idpsync.GroupParams, *idpsync.HTTPError) {
	resp, err := e.AGPLIDPSync.ParseGroupClaims(ctx, mergedClaims)
	if err != nil {
		return idpsync.GroupParams{}, err
	}
	return idpsync.GroupParams{
		SyncEntitled: e.GroupSyncEntitled(),
		MergedClaims: resp.MergedClaims,
	}, nil
}