Method extract_roles

crates/openshell-server/src/auth/oidc.rs:119–133

Extract roles from the JWT claims using a dot-separated path. Supports paths like: - `realm_access.roles` (Keycloak) - `roles` (Entra ID) - `groups` (Okta)

(&mut self, roles_claim: &str)

    /// - `roles` (Entra ID)
    /// - `groups` (Okta)
    fn extract_roles(&mut self, roles_claim: &str) {
        let mut value = &self.extra;
        for segment in roles_claim.split('.') {
            match value.get(segment) {
                Some(v) => value = v,
                None => return,
            }
        }
        if let Some(arr) = value.as_array() {
            self.roles = arr
                .iter()
                .filter_map(|v| v.as_str().map(String::from))
                .collect();
        }
    }

    /// Extract scopes from the JWT claims using a dot-separated path.
    ///