Merge pull request MISP#7230 from jozuatec/patch-2

Update OidcAuthenticate.php
SteveClement · Apr 20, 2021 · c25dd70 · c25dd70
2 parents 655fc61 + 85040d6
commit c25dd70
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/app/Plugin/OidcAuth/Controller/Component/Auth/OidcAuthenticate.php b/app/Plugin/OidcAuth/Controller/Component/Auth/OidcAuthenticate.php
@@ -47,6 +47,9 @@ public function authenticate(CakeRequest $request, CakeResponse $response)
         if (property_exists($verifiedClaims, $roleProperty)) {
             $roles = $verifiedClaims->{$roleProperty};
         }
+        if (empty($roles)) {
+            $roles = $oidc->requestUserInfo($roleProperty);
+        }
 
         $this->settings['fields'] = ['username' => 'email'];
         $user = $this->_findUser($mispUsername);