Documentation
¶
Overview ¶
The azure package provides support for resolving Azure Entra ID distributed group claims. When a user belongs to more than 200 groups, Azure omits the groups claim from the token and includes an overage indicator pointing to the Microsoft Graph API instead. For more information on this limitation see https://learn.microsoft.com/en-us/entra/identity-platform/access-token-claims-reference#groups-overage-claim
ResolveGroupClaims detects that overage indicator and fetches the full list of group IDs from the Graph API on behalf of the caller.
Index ¶
Constants ¶
This section is empty.
Variables ¶
var ( ErrInvalidParameter = errors.New("invalid parameter") ErrNilParameter = errors.New("nil parameter") )
Functions ¶
func ResolveGroupClaims ¶
func ResolveGroupClaims(ctx context.Context, client *http.Client, token *oauth2.Token, claims map[string]any) (map[string]any, error)
ResolveGroupClaims will detect an Azure groups overage indicator in the provided claims and fetch the full list of group IDs from the Microsoft Graph API using the provided OAuth2 token. When no overage indicator is present, it returns an empty map. On success, the returned map contains a "groups" key populated with the user's group IDs.
Types ¶
This section is empty.
Source Files