Module group_claims 

Shared JWT group-claim extraction used by both OIDC and Frontegg authenticators. Encapsulates the dot-separated claim-path resolution and the array-vs-string normalization so the two authenticators behave identically.

Functions

extract_groups

Extracts group names from a JWT’s unknown-claims map.

resolve_claim_path 🔒

Walks a dot-separated claim path into nested JSON objects. Returns None if the path is empty, any segment is empty, an intermediate segment is missing, or an intermediate segment resolves to a non-object value.