fix: Keycloak OAuth2, get groups as role_keys per default (#2235)

berlincount · web-flow · commit a2c91db260dd · 2024-05-13T09:12:07.000+01:00
diff --git a/flask_appbuilder/security/manager.py b/flask_appbuilder/security/manager.py
@@ -695,6 +695,7 @@ def get_oauth_user_info(
                 "first_name": data.get("given_name", ""),
                 "last_name": data.get("family_name", ""),
                 "email": data.get("email", ""),
+                "role_keys": data.get("groups", []),
             }
         # for Authentik
         if provider == "authentik":

Original file line number	Diff line number	Diff line change
`@@ -695,6 +695,7 @@ def get_oauth_user_info(`
`695`	`695`	`"first_name": data.get("given_name", ""),`
`696`	`696`	`"last_name": data.get("family_name", ""),`
`697`	`697`	`"email": data.get("email", ""),`
	`698`	`+ "role_keys": data.get("groups", []),`
`698`	`699`	`}`
`699`	`700`	`# for Authentik`
`700`	`701`	`if provider == "authentik":`