OpenID Connect group can kick users out of all unsynced groups

Contribute Fout
,
3

Can you let me know if this summary is correct?

  • prior state:
    • user bilbo is in groups A, B, C on Discourse
    • groups B and C are set up for automatic membership with OIDC groups b and c (respectively)
    • OpenID Connect groups claim is set to e.g. groups
  • action taken:
    • user bilbo logs in via OIDC
    • oidc claim contains groups c, d
    • (group D does not exist on Discourse)
    • Discourse removes bilbo from groups A and B
      :red_exclamation_mark: removing the A group membership is incorrect