Allows for groups claim to be a string or array depending on auth type

gregcorbett · Feb 1, 2021 · e79dda7 · e79dda7
1 parent fe1a66c
commit e79dda7
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/Authentication/AuthTokens/IAMAuthToken.php b/lib/Authentication/AuthTokens/IAMAuthToken.php
@@ -85,7 +85,7 @@ private function getAttributesInitToken(){
                 die('You must login via your organisation on IRIS IAM to gain access to this site.');
             }
             //Don't allow access unless user is a member of the IRIS gocdb group
-            if(strpos($_SERVER['OIDC_CLAIM_groups'], "gocdb")===false){
+            if(strpos($_SERVER['OIDC_CLAIM_groups'], "gocdb")===false and in_array('gocdb', $_SERVER['OIDC_CLAIM_groups'])===false){
                 die('You do not belong to the correct group to gain access to this site. Please visit iris-iam.stfc.ac.uk and submit a request to join the GOCDB group. This shall be reviewed by a GOCDB admin.');
             }
         }