nextcloud / user_oidc

OIDC connect user backend for Nextcloud
GNU Affero General Public License v3.0
88 stars 35 forks source link

support flattening of nested groups like keycloak uses #952

Open yennor opened 1 month ago

yennor commented 1 month ago

How to use GitHub


Feature request

Which Nextcloud Version are you currently using: 29.0.6

Is your feature request related to a problem? Please describe. In Keycloak it is possible to have nested (hierarchical) groups like "/parent/child". So if a user is member of child group it is implicitly also member of parent group. Nextcloud doesn't support nested groups. Unfortunately at the time being keycloak can only send the whole group path "/parent/child" or only the group the user is explicitly member of, so "child'. In a lot of use cases, having an option which supports flattening the groups would be enough. Like "/parent/child" becomes the two groups:

Would be nice if that would be an selectable option for the user_oidc app.

edward-ly commented 1 month ago

Thanks for the suggestion! If you're interested, you are welcome to submit a pull request as well and we'll promptly take a look at it.