Synchronize Groups Feature

[col-panic]

It would be nice to be able to synchronize the membership of groups to the info provided via Oauth.

Lets fix an example, on the redmine system there exist 3 groups, that can be seen via https://my.redmine.org/groups
named supporter, controller, manager. Now the membership to each of these groups is dynamically
assigned via oauth2.

Currently there is the setting Validate user roles to allow overall access and/or admin rights.

The setting Dynamic group membership could just the same way be used to insert a value like roles.redmine where
the following example content

roles: {
  redmine: ["supporter", "controller"]
}

would assign the given user to be a member of the supporter and controllergroup.

• If JWT contains a group which does not exist in redmine: ignore it
• Assignments are absolute, so for this example, in any other groups defined, the user would NOT be a member