Group allow list on Keycloak / OpenId connect

[pierreozoux]

Trying to understand how this works.

I saw this PR merged: https://github.com/python-social-auth/social-core/pull/801/changes

Wondering if you would accept a similar contribution to BaseOauth2 ?

Or do you think this logic should be implemented on the application level?

Thanks for your feedback!

[nijel]

I'm not sure if there is some standard to pass user membership in OAuth2. Without that, it makes little sense to implement it there.