Describe the Bug
It seems the application only parses the id_token when enumerating group claims but not the userinfo endpoint resulting in missing groups when user_info is in use.
We have a large amount of custom claims containing lots of groups making usage of id_token impossible (as its size would be simply too much).
Steps to Reproduce
- Make sure you IdP uses
user_info to send claims with groups
- Configure OIDC to sync groups
- Dump user detail upon login
Expected Behaviour
A list of groups should be returned.
Browser Details
Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0
Exact BookStack Version
v22.10.2
PHP Version
8.1.12
Hosting Environment
Rancher Kubernetes
Docker image: solidnerd/bookstack:latest
Clean install
Describe the Bug
It seems the application only parses the
id_tokenwhen enumerating group claims but not theuserinfoendpoint resulting in missing groups whenuser_infois in use.We have a large amount of custom claims containing lots of groups making usage of
id_tokenimpossible (as its size would be simply too much).Steps to Reproduce
user_infoto send claims with groupsExpected Behaviour
A list of groups should be returned.
Browser Details
Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0
Exact BookStack Version
v22.10.2
PHP Version
8.1.12
Hosting Environment
Rancher Kubernetes
Docker image: solidnerd/bookstack:latest
Clean install