NodeBB / NodeBB/nodebb-plugin-sso-oauth2-multiple

users are not getting removed from nodebb groups after group membership change in Keycloak

Open
#133 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
JavaScript
Stars
14
Forks
9
Avg merge
1m
Merged PRs (30d)
7

Description

Hi

The role-to-group associations automatically assign the correct group in Nodebb.

However, if the group is removed in Keycloak and the user then logs in again, this does not produce the desired result. The Nodebb group assignment remains unchanged.

Is there something like a synchronisation during login and a check to see if the role-to-group associations are still correct?

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

No files or tests are named. Start by tracing the login flow and the role-to-group association handling, then check how existing NodeBB group assignments are updated when Keycloak roles change. Done means logging in after a Keycloak group removal also removes the corresponding NodeBB group membership.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript
Domain
authentication, backend
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.