Method applyOidcGroupsToPro

src/FileRise/Domain/AuthModel.php:153–253

* Map OIDC groups into FileRise Pro groups (additive only – we never remove membership). * * @param string $username Local FileRise username * @param array $groupSlugs Array of group keys coming from the IdP, * already filtered by FR_OIDC_GROUP_PREFIX. */

(string $username, array $groupSlugs)

     *                           already filtered by FR_OIDC_GROUP_PREFIX.
     */
    public static function applyOidcGroupsToPro(string $username, array $groupSlugs): void
    {
        if (empty($groupSlugs)) {
            return;
        }
        if (!defined('FR_PRO_ACTIVE') || !FR_PRO_ACTIVE) {
            return;
        }
        if (!defined('FR_PRO_BUNDLE_DIR') || !FR_PRO_BUNDLE_DIR) {
            return;
        }

        $bundleDir     = rtrim(FR_PRO_BUNDLE_DIR, '/\\');
        $proGroupsPath = $bundleDir . '/ProGroups.php';
        if (!is_file($proGroupsPath)) {
            error_log('[OIDC] ProGroups.php not found at ' . $proGroupsPath);
            return;
        }

        require_once $proGroupsPath;
        if (!class_exists('ProGroups')) {
            error_log('[OIDC] ProGroups class not found after include.');
            return;
        }

        $store = new \ProGroups($bundleDir);

    // IMPORTANT: use load() so we preserve the full { "groups": ... } structure
        $data = $store->load();
        if (!is_array($data)) {
            $data = [];
        }
        if (!isset($data['groups']) || !is_array($data['groups'])) {
            $data['groups'] = [];
        }

        $groups = &$data['groups'];

    // Build lowercase key index for case-insensitive lookups of existing groups
        $keyIndex = [];
        foreach ($groups as $key => $_info) {
            $keyIndex[strtolower((string)$key)] = $key;
        }

        $uname   = (string)$username;
        $unameLc = strtolower($uname);

        foreach ($groupSlugs as $rawSlug) {
            $slug = trim((string)$rawSlug);
            if ($slug === '') {
                continue;
            }

            $slugLc = strtolower($slug);

            // 1) Find existing group (case-insensitive) or auto-create a new one keyed by the slug
            if (isset($keyIndex[$slugLc])) {
                $groupKey = $keyIndex[$slugLc];