Implement a mechanism for replacing chunks of the UserID value. about oidc-authservice HOT 1 CLOSED

A proposed solution is:

Add an extra configuration option in the form:

USERID_TRANSFORMERS= [{"matches": "regex",  "replaces": "value" }]

Using this option the oidc-authservice will internally transform the UserID by finding the first transformation rule that matches a regex and replacing it with value. Note that USER_ID_TRANSFORMERS is a string value and the \ character must be escaped, e.g., to use @domain\.com$ regular expression use the configuration [{"matches": "@domain\\.com$", "value"}] (using \\).

For example using:

USERID_TRANSFORMERS = [{"matches": "user@domain\\.com$", "internal"}, {"matches": "@domain\\.com$", ""}]

Will do the following transformations:

1. The userid: [email protected] will be transformed to internal according to the first rule ({"matches": "user@domain\\.com$", "internal"}).
   Even though the userid matches both rules, only the first one will be applied.
2. The userid: [email protected] will be transformed to another according to the second rule {"matches": "@domain\\.com$", ""}
3. The userid: [email protected] will not be transformed and the original value will be used ([email protected] )

from oidc-authservice.