OAuth: filter by groups or map groups

[lprobsth]

Currently the oauth SSO option allows all users from the oauth provider to login.

It would be nice to use the groups defined by the identity provider with OAUTH_ATTRIBUTE_MAP.

Use cases:

• only allow users from certain groups to login
• map groups from the oauth provider to the internal groups. Can this be implemented like the role mapping?
  

  seahub/seahub/oauth/views.py

  Lines 232 to 244 in 03b11b6

  	if CUSTOM_GET_USER_ROLE:
  	remote_role_value = oauth_user_info.get('role', '')
  	if remote_role_value:
  	role = custom_get_user_role(remote_role_value)
  	# update user role
  	ccnet_api.update_role_emailuser(email, role)
  	# update user role quota
  	role_quota = get_enabled_role_permissions_by_role(role)['role_quota']
  	if role_quota:
  	quota = get_quota_from_string(role_quota)
  	seafile_api.set_role_quota(role, quota)