Prioritize groups path over groups claim

Potentially existing group claims will be overwritten by the claim specified in `smallrye.jwt.path.groups`. Signed-off-by: Lukas Ziefle <[email protected]>
smallrye · Feb 29, 2024 · 3308b38 · 3308b38
1 parent 811160f
commit 3308b38
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/implementation/jwt-auth/src/main/java/io/smallrye/jwt/auth/principal/PrincipalUtils.java b/implementation/jwt-auth/src/main/java/io/smallrye/jwt/auth/principal/PrincipalUtils.java
@@ -47,7 +47,8 @@ public static void setClaims(JwtClaims claimsSet, String token, JWTAuthContextIn
             claimsSet.setClaim(Claims.sub.name(), sub);
         }
         Object groupsClaim = claimsSet.getClaimValue(Claims.groups.name());
-        if (groupsClaim == null || groupsClaim instanceof Map) {
+        if (groupsClaim == null || groupsClaim instanceof Map
+            || authContextInfo.getGroupsPath() != null) { // specified groups path takes precedence over existing groups and replaces them
             List<String> groups = findGroups(authContextInfo, claimsSet);
             claimsSet.setClaim(Claims.groups.name(), groups);
         } else if (groupsClaim instanceof String) {