reverseProxyAuth: If user has more groups than configured then login fails about cloudbeaver

[EvgeniaBzzz]

Hi @brunnels
We'll add the ability to create teams via proxy. Thank you for your request!

[brunnels]

@EvgeniaBzzz I'm not sure I would want it to create the teams. I just want it to ignore any groups sent in the proxy header that don't exist in the cloudbeaver config.

[EvgeniaBzzz]

Let me ask, what is the purpose of adding additional non-existent groups to the upstream auth?

[brunnels]

@EvgeniaBzzz It's a standard thing. The upstream reverse proxy is backed by ldap. This would automatically send any groups the user is a member of in the Remote-Groups header. There's no way to filter or modify this. Cloudbeaver should only care about groups/teams it knows about so I think it's a bug for it to raise an exception in this case.

[EvgeniaBzzz]

Ok, thanks for the clarification