Merge pull request #107 from serlo/check-for-vidis-role-on-login

feat: check for vidis role on login
serlo · Jul 25, 2024 · b18186c · b18186c
2 parents a01815a + 886744a
commit b18186c
Showing 1 changed file with 7 additions and 2 deletions.
diff --git a/modules/kratos/vidis_user_mapper.jsonnet b/modules/kratos/vidis_user_mapper.jsonnet
@@ -21,12 +21,17 @@ local buildUsername = function()
   then preferredUsername + '-' + enshortenUuid(uuid)
   else enshortenUuid(uuid);
 
-{
+local checkIfIsTeacher = function()
+  local rawClaims = extractFromClaims('raw_claims');
+
+  if 'rolle' in rawClaims then rawClaims['rolle'] == 'LEHR' else false;
+
+if checkIfIsTeacher() then {
   identity: {
     traits: {
       email: buildEmail(),
       username: buildUsername(),
       interest: 'other',
     },
   },
-}
+} else error "ERR_BAD_ROLE"