OAUTH Additional claims

[serg-bs]

Description & motivation 💭

#1913

Design Considerations 🎨

We introduce new parameter in oauth config

Testing 🧪

Tune the Oauth provider to response with additional claims, I did it with SAP IAS
Response example:

    "IDTokenClaims": {
..
        "group": [
            "pgadmin",
            "temporal"
        ]
    }

How was this tested 👻

• Manual testing
• E2E tests added
• Unit tests added

Steps for others to test: 🚶🏽‍♂️🚶🏽‍♀️

Checklists

Issue(s) closed

#1913

Docs

Any docs updates needed?

In helm chart web-deployment.yaml

         {{- if .Values.web.config.auth.additionalClaims}}
            - name: TEMPORAL_OAUTH_ADDITIONAL_CLAIMS
              value: |
                  {{ printf "%s" .Values.web.config.auth.additionalClaims}}
        {{- end }}

In values.yaml

web:
  image:
    repository: sergbs/temporalui
  config:
    auth:
      enabled: true
      additionalClaims: "group: \"temporal\""

That works on our environment perfect

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
holocene	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Apr 15, 2024 9:23am

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.

---

Sergei Bespalov seems not to be a GitHub user. You need a GitHub account to be able to sign the CLA. If you have already a GitHub account, please add the email address used for this commit to your account.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}