idp

func GetValueWithKey ¶

func GetValueWithKey(data map[string]any, key string) any

GetValueWithKey returns the value of the key in the data. The key is a dot-separated path, so a nested claim such as "realm_access.roles" resolves.

func GroupValues ¶

func GroupValues(claim any) ([]string, bool)

GroupValues turns a provider's group claim into a list of group names. It reports whether the claim's shape was understood.

A JSON claim carrying groups is normally an array of strings. Some providers emit one delimited string instead — the `scope` convention, or a comma-joined list — so both are accepted. An unparsable shape is reported as not understood rather than as an empty list: an empty list is a provider saying "no groups", and acting on that would remove every membership of an account whose provider merely changed the claim's type.

That last point is why an array that yielded no name at all — every entry a number, or an object such as `{"id":"dev"}` — is reported as not understood too. It is a shape this cannot read, not a provider saying the account has no groups.