[cueweb] Request Okta groups scope for group memberships

[ramonfigueiredo]

Related Issues

• [cueweb] Request Okta groups scope so ID token carries group memberships #2476

Summarize your change.

[cueweb] Request Okta groups scope for group memberships

• Add groups to the OIDC scopes so the Okta ID token carries group claims consumed by extractGroups; required when using a custom Okta Authorization Server.

[coderabbitai]

📝 Walkthrough

Walkthrough

The Okta NextAuth provider configuration is updated to include an authorization.params.scope value of "openid email profile groups", adding the groups scope to the previously configured clientId, clientSecret, and issuer fields.

Changes

Okta provider scope configuration

Layer / File(s)	Summary
Add groups scope to Okta provider cueweb/lib/auth.ts	The Okta provider config now requests authorization.params.scope = "openid email profile groups" in addition to existing clientId, clientSecret, and issuer fields.

Estimated code review effort: 1 (Trivial) | ~3 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly matches the main change: adding the Okta groups scope to support group membership extraction.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}