From dbf5684b989dfa901d83e15c1de802d2fc8af594 Mon Sep 17 00:00:00 2001
From: YuviPanda <yuvipanda@gmail.com>
Date: Fri, 5 Apr 2024 15:13:02 -0700
Subject: [PATCH] Turn 'scope' from OAuth2 response into JupyterHub groups

---
 config/clusters/earthscope/common.values.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/config/clusters/earthscope/common.values.yaml b/config/clusters/earthscope/common.values.yaml
index 632f079abc..4aebac876e 100644
--- a/config/clusters/earthscope/common.values.yaml
+++ b/config/clusters/earthscope/common.values.yaml
@@ -108,6 +108,9 @@ basehub:
             # This isn't an actual URL, just a string. Must not have a trailing slash
             audience: https://api.dev.earthscope.org
           username_claim: sub
+          # Convert 'scope' from the OAuth2 response into JupyterHub groups
+          manage_groups: true
+          claim_groups_key: 'scope'
         CILogonOAuthenticator:
           allowed_idps:
             http://github.com/login/oauth/authorize: