oidc claim check

[DarthSlider]

Feature request.

We have quite a big keycloak instance and now all users imported to keycloak from different user federations could log in into sentry.

It would be great if sentry could check for a specific claim in JWT like claim, or much better, any claim provided as key:value and reply with 403 for users without necessary rights.

[max-wittig]

Hi @DarthSlider Thanks for the request. We actually face the same problem, but I haven't had the time to further investigate and I'm not even sure if this extension can fix this or if it's a problem in sentry itself. But I would be really happy to review any PRs!

[DarthSlider]

@max-wittig I'm not really know how this extension works, but I`m quite familiar with keycloak gatekeeper and it could check for a specific claim in jwt. Even Nginx could do it.
This plugin should check incoming jwt at least for expiration (exp claim), so the additional check doesn't look that hard.