Method syncOidcGroupsToPro

src/FileRise/Domain/AuthModel.php:893–1015

* Sync IdP groups into FileRise Pro groups using a prefix-based mapping. * * - Only runs when FR_PRO_ACTIVE + FR_PRO_BUNDLE_DIR + FR_OIDC_PRO_GROUP_PREFIX are set. * - Only groups whose *IdP name* starts with FR_OIDC_PRO_GROUP_PREFIX are considered. * - The Pro group name is derived from the suffix, normalized to [a-z0-9_-]. * - For those Pro groups: * - Ensure th

(string $username, array $groups)

     * - Does NOT touch per-folder grants; admins still configure ACLs via the Pro UI.
     */
    public static function syncOidcGroupsToPro(string $username, array $groups): void
    {
        if (empty($groups)) {
            return;
        }
        if (
            !defined('FR_PRO_ACTIVE') || !FR_PRO_ACTIVE ||
            !defined('FR_PRO_BUNDLE_DIR') || !FR_PRO_BUNDLE_DIR ||
            !defined('FR_OIDC_PRO_GROUP_PREFIX')
        ) {
            return;
        }

        $prefix    = (string)FR_OIDC_PRO_GROUP_PREFIX;
        $prefixLen = strlen($prefix);

        // Normalize incoming groups to a clean list of strings
        $raw = [];
        foreach ($groups as $g) {
            $g = trim((string)$g);
            if ($g !== '') {
                $raw[] = $g;
            }
        }
        if (!$raw) {
            return;
        }

        // Map IdP groups → Pro group names (suffix of prefix, normalized)
        $desiredNames = [];
        foreach ($raw as $g) {
            if ($prefix === '' || stripos($g, $prefix) === 0) {
                $slug = ($prefix === '')
                    ? $g
                    : substr($g, $prefixLen);

                $slug = strtolower(preg_replace('/[^a-z0-9_\-]/i', '_', $slug));
                if ($slug !== '') {
                    $desiredNames[] = $slug;
                }
            }
        }
        $desiredNames = array_values(array_unique($desiredNames));
        if (!$desiredNames) {
            return;
        }

        $proGroupsPath = rtrim((string)FR_PRO_BUNDLE_DIR, "/\\") . '/ProGroups.php';
        if (!is_file($proGroupsPath)) {
            return;
        }

        require_once $proGroupsPath;
        if (!class_exists('ProGroups')) {
            return;
        }

        $store = new ProGroups(FR_PRO_BUNDLE_DIR);