RocketChat · geekgonecrazy · Apr 15, 2019 · Mar 18, 2019 · Mar 18, 2019 · Mar 18, 2019
diff --git a/app/custom-oauth/server/custom_oauth_server.js b/app/custom-oauth/server/custom_oauth_server.js
@@ -6,6 +6,7 @@ import { HTTP } from 'meteor/http';
 import { ServiceConfiguration } from 'meteor/service-configuration';
 import { Logger } from '../../logger';
 import { Users } from '../../models';
+import { mapRolesFromSSO } from './oauth_helpers';
 import _ from 'underscore';
 import { isURL } from '../../utils/lib/isURL';
 
@@ -66,6 +67,7 @@ export class CustomOAuth {
 		this.identityTokenSentVia = options.identityTokenSentVia;
 		this.usernameField = (options.usernameField || '').trim();
 		this.mergeUsers = options.mergeUsers;
+		this.rolesClaim = options.rolesClaim || 'roles';
 
 		if (this.identityTokenSentVia == null || this.identityTokenSentVia === 'default') {
 			this.identityTokenSentVia = this.tokenSentVia;
@@ -248,6 +250,8 @@ export class CustomOAuth {
 				if (!identity.email && (identity.emails && Array.isArray(identity.emails) && identity.emails.length >= 1)) {
 					identity.email = identity.emails[0].address ? identity.emails[0].address : undefined;
 				}
+				const user = Users.findOneByEmailAddress(identity.email);
+				mapRolesFromSSO(user, identity, this.rolesClaim || 'roles');
 			}
 
 			// console.log 'id:', JSON.stringify identity, null, '  '

diff --git a/app/custom-oauth/server/oauth_helpers.js b/app/custom-oauth/server/oauth_helpers.js
@@ -0,0 +1,33 @@
+import { addUserRoles, removeUserFromRoles } from '../../authorization';
+
+/**
+*/
+export function mapRolesFromSSO(user, identity, roleClaimName) {
+	if (user && roleClaimName) {
+		// Adding roles
+		if (identity[roleClaimName]) {
+			// loop through all assigned roles and drop if not assigned anymore
+			user[roleClaimName].forEach(function(roleFromOAuthProvider) {
+				if (identity[roleClaimName].length === 0) {
+					removeUserFromRoles(user._id, roleFromOAuthProvider);
+				}
+				if (identity[roleClaimName].indexOf(roleFromOAuthProvider) === -1) {
+					removeUserFromRoles(user._id, roleFromOAuthProvider);
+				}
+			});
+			// loop through all roles from SSO Provider and add them if needed
+			identity[roleClaimName].forEach(function(roleFromOAuthProvider) {
+				if (user[roleClaimName].indexOf(roleFromOAuthProvider) === -1
+					/* filter OpenID pseudo roles */
+					&& roleFromOAuthProvider !== 'offline_access' && roleFromOAuthProvider !== 'uma_authorization') {
+					addUserRoles(user._id, roleFromOAuthProvider);
+				}
+			});
+		} else {
+			// else drop all roles
+			user[roleClaimName].forEach(function(roleFromOAuthProvider) {
+				removeUserFromRoles(user._id, roleFromOAuthProvider);
+			});
+		}
+	}
+}
diff --git a/app/lib/server/methods/addOAuthService.js b/app/lib/server/methods/addOAuthService.js
diff --git a/app/lib/server/methods/removeOAuthService.js b/app/lib/server/methods/removeOAuthService.js
@@ -34,6 +34,7 @@ Meteor.methods({
 		settings.removeById(`Accounts_OAuth_Custom-${ name }-button_color`);
 		settings.removeById(`Accounts_OAuth_Custom-${ name }-login_style`);
 		settings.removeById(`Accounts_OAuth_Custom-${ name }-username_field`);
+		settings.removeById(`Accounts_OAuth_Custom-${ name }-roles_claim`);
 		settings.removeById(`Accounts_OAuth_Custom-${ name }-merge_users`);
 	},
 });
diff --git a/app/lib/server/startup/oAuthServicesUpdate.js b/app/lib/server/startup/oAuthServicesUpdate.js
@@ -45,6 +45,7 @@ function _OAuthServicesUpdate() {
 				data.tokenSentVia = settings.get(`${ service.key }-token_sent_via`);
 				data.identityTokenSentVia = settings.get(`${ service.key }-identity_token_sent_via`);
 				data.usernameField = settings.get(`${ service.key }-username_field`);
+				data.rolesClaim = settings.get(`${ service.key }-roles_claim`);
 				data.mergeUsers = settings.get(`${ service.key }-merge_users`);
 				new CustomOAuth(serviceName.toLowerCase(), {
 					serverURL: data.serverURL,
@@ -56,6 +57,7 @@ function _OAuthServicesUpdate() {
 					tokenSentVia: data.tokenSentVia,
 					identityTokenSentVia: data.identityTokenSentVia,
 					usernameField: data.usernameField,
+					rolesClaim: data.rolesClaim,
 					mergeUsers: data.mergeUsers,
 				});
 			}

diff --git a/packages/rocketchat-i18n/i18n/af.i18n.json b/packages/rocketchat-i18n/i18n/af.i18n.json
@@ -86,6 +86,7 @@
   "Accounts_OAuth_Custom_Token_Path": "Token Pad",
   "Accounts_OAuth_Custom_Token_Sent_Via": "Token Sent Via",
   "Accounts_OAuth_Custom_Username_Field": "Gebruikersnaam veld",
+  "Accounts_OAuth_Custom_Roles_Claim": "Rol / Groepen veldnaam",
   "Accounts_OAuth_Drupal": "Drupal-aanmelding geaktiveer",
   "Accounts_OAuth_Drupal_callback_url": "Drupal oAuth2 Redirect URI",
   "Accounts_OAuth_Drupal_id": "Drupal oAuth2 kliënt ID",

diff --git a/packages/rocketchat-i18n/i18n/ar.i18n.json b/packages/rocketchat-i18n/i18n/ar.i18n.json
@@ -86,6 +86,7 @@
   "Accounts_OAuth_Custom_Token_Path": "مسار رمزي",
   "Accounts_OAuth_Custom_Token_Sent_Via": "رمزي المرسلة عن طريق",
   "Accounts_OAuth_Custom_Username_Field": "حقل اسم المستخدم",
+  "Accounts_OAuth_Custom_Roles_Claim": "اسم حقل الأدوار / المجموعات",
   "Accounts_OAuth_Drupal": "تم تفعيل تسجيل الدخول عبر دوربال",
   "Accounts_OAuth_Drupal_callback_url": "دروبال oAuth2 إعادة توجيه عنوان أوري",
   "Accounts_OAuth_Drupal_id": "رمز تعريف العميل الخاص بدوربال oAuth2",

diff --git a/packages/rocketchat-i18n/i18n/az.i18n.json b/packages/rocketchat-i18n/i18n/az.i18n.json
@@ -86,6 +86,7 @@
   "Accounts_OAuth_Custom_Token_Path": "Token yolu",
   "Accounts_OAuth_Custom_Token_Sent_Via": "Token Via göndərdi",
   "Accounts_OAuth_Custom_Username_Field": "İstifadəçi adı",
+  "Accounts_OAuth_Custom_Roles_Claim": "Rollər / Qruplar sahəsinin adı",
   "Accounts_OAuth_Drupal": "Drupal Giriş Aktiv Edildi",
   "Accounts_OAuth_Drupal_callback_url": "Drupal oAuth2 Redirect URI",
   "Accounts_OAuth_Drupal_id": "Drupal oAuth2 Müştəri ID",

diff --git a/packages/rocketchat-i18n/i18n/be-BY.i18n.json b/packages/rocketchat-i18n/i18n/be-BY.i18n.json
@@ -87,6 +87,7 @@
   "Accounts_OAuth_Custom_Token_Path": "Token Path",
   "Accounts_OAuth_Custom_Token_Sent_Via": "Token Sent Via",
   "Accounts_OAuth_Custom_Username_Field": "Поле імя карыстальніка",
+  "Accounts_OAuth_Custom_Roles_Claim": "Ролі / імя групы поле",
   "Accounts_OAuth_Drupal": "Ўключыць уваход праз Drupal",
   "Accounts_OAuth_Drupal_callback_url": "Drupal oAuth2 Redirect URI",
   "Accounts_OAuth_Drupal_id": "Drupal oAuth2 Client ID",

diff --git a/packages/rocketchat-i18n/i18n/bg.i18n.json b/packages/rocketchat-i18n/i18n/bg.i18n.json
@@ -86,6 +86,7 @@
   "Accounts_OAuth_Custom_Token_Path": "Пътека за означения",
   "Accounts_OAuth_Custom_Token_Sent_Via": "Точен изпратен чрез",
   "Accounts_OAuth_Custom_Username_Field": "Потребителско поле",
+  "Accounts_OAuth_Custom_Roles_Claim": "Име на полето Роли / Групи",
   "Accounts_OAuth_Drupal": "Drupal Login Enabled",
   "Accounts_OAuth_Drupal_callback_url": "URI за пренасочване на Drupal oAuth2",
   "Accounts_OAuth_Drupal_id": "Drupal oAuth2 Client ID",

diff --git a/packages/rocketchat-i18n/i18n/bs.i18n.json b/packages/rocketchat-i18n/i18n/bs.i18n.json
@@ -86,6 +86,7 @@
   "Accounts_OAuth_Custom_Token_Path": "Putanja Tokena",
   "Accounts_OAuth_Custom_Token_Sent_Via": "Token poslan putem",
   "Accounts_OAuth_Custom_Username_Field": "Polje korisničkog imena",
+  "Accounts_OAuth_Custom_Roles_Claim": "Ime polja Vloge / Skupine",
   "Accounts_OAuth_Drupal": "Drupal Prijava omogućen",
   "Accounts_OAuth_Drupal_callback_url": "Drupal oAuth2 preusmjeravanje URI",
   "Accounts_OAuth_Drupal_id": "Drupal ID klijenta oAuth2",

diff --git a/packages/rocketchat-i18n/i18n/ca.i18n.json b/packages/rocketchat-i18n/i18n/ca.i18n.json
@@ -86,6 +86,7 @@
   "Accounts_OAuth_Custom_Token_Path": "Ruta del token",
   "Accounts_OAuth_Custom_Token_Sent_Via": "Token enviat via",
   "Accounts_OAuth_Custom_Username_Field": "Camp de nom d'usuari",
+  "Accounts_OAuth_Custom_Roles_Claim": "Nom du champ Rôles/Groupes",
   "Accounts_OAuth_Drupal": "Activa inici de sessió de Drupal",
   "Accounts_OAuth_Drupal_callback_url": "Redirect URI de Drupal oAuth2",
   "Accounts_OAuth_Drupal_id": "Client ID de Drupal oAuth2",

diff --git a/packages/rocketchat-i18n/i18n/cs.i18n.json b/packages/rocketchat-i18n/i18n/cs.i18n.json
@@ -86,6 +86,7 @@
   "Accounts_OAuth_Custom_Token_Path": "Cesta k tokenu",
   "Accounts_OAuth_Custom_Token_Sent_Via": "Token odesílány přes",
   "Accounts_OAuth_Custom_Username_Field": "Pole uživatelské jméno",
+  "Accounts_OAuth_Custom_Roles_Claim": "Název pole Role / Skupiny",
   "Accounts_OAuth_Drupal": "Povolit Drupal přihlášení",
   "Accounts_OAuth_Drupal_callback_url": "Drupal oAuth2 URI Přesměrování",
   "Accounts_OAuth_Drupal_id": "Drupal oAuth2 ID klienta",

diff --git a/packages/rocketchat-i18n/i18n/cy.i18n.json b/packages/rocketchat-i18n/i18n/cy.i18n.json
@@ -86,6 +86,7 @@
   "Accounts_OAuth_Custom_Token_Path": "Llwybr Tocynnau",
   "Accounts_OAuth_Custom_Token_Sent_Via": "Tocynnau a Dderbyniwyd Drwy",
   "Accounts_OAuth_Custom_Username_Field": "Maes enw defnyddiwr",
+  "Accounts_OAuth_Custom_Roles_Claim": "Enw maes Rolau / Grwpiau",
   "Accounts_OAuth_Drupal": "Galluogi Mewngofnodi Drupal",
   "Accounts_OAuth_Drupal_callback_url": "Drupal oAuth2 Ailgyfeirio URI",
   "Accounts_OAuth_Drupal_id": "ID Cleient Drupal oAuth2",

diff --git a/packages/rocketchat-i18n/i18n/da.i18n.json b/packages/rocketchat-i18n/i18n/da.i18n.json
@@ -92,6 +92,7 @@
   "Accounts_OAuth_Custom_Token_Path": "Tokensti",
   "Accounts_OAuth_Custom_Token_Sent_Via": "Token sendt via",
   "Accounts_OAuth_Custom_Username_Field": "Brugernavnefelt",
+  "Accounts_OAuth_Custom_Roles_Claim": "Roller / Grupper feltnavn",
   "Accounts_OAuth_Drupal": "Drupal-login aktiveret",
   "Accounts_OAuth_Drupal_callback_url": "Omdirigerings-uri for Drupals oAuth2",
   "Accounts_OAuth_Drupal_id": "Klient-id for Drupals oAuth2",

diff --git a/packages/rocketchat-i18n/i18n/de-AT.i18n.json b/packages/rocketchat-i18n/i18n/de-AT.i18n.json
@@ -86,6 +86,7 @@
   "Accounts_OAuth_Custom_Token_Path": "Pfad des Token",
   "Accounts_OAuth_Custom_Token_Sent_Via": "Token gesendet über",
   "Accounts_OAuth_Custom_Username_Field": "Benutzername Feld",
+  "Accounts_OAuth_Custom_Roles_Claim": "Rollen/Gruppen Feld",
   "Accounts_OAuth_Drupal": "Drupal Login aktiviert",
   "Accounts_OAuth_Drupal_callback_url": "Drupal oAuth2 Weiterleitungs-URI",
   "Accounts_OAuth_Drupal_id": "Drupal oAuth2 Client ID",

diff --git a/packages/rocketchat-i18n/i18n/de-IN.i18n.json b/packages/rocketchat-i18n/i18n/de-IN.i18n.json
@@ -87,6 +87,7 @@
   "Accounts_OAuth_Custom_Token_Path": "Pfad des Token",
   "Accounts_OAuth_Custom_Token_Sent_Via": "Token gesendet über",
   "Accounts_OAuth_Custom_Username_Field": "Feld für Benutzernamen",
+  "Accounts_OAuth_Custom_Roles_Claim": "Rollen/Gruppen Feld",
   "Accounts_OAuth_Drupal_callback_url": "Drupal OAuth Redirect Url",
   "Accounts_OAuth_Drupal_id": "Drupal oAuth2 Client ID",
   "Accounts_OAuth_Drupal_secret": "Geheimer Drupal oAuth2 Client Schlüssel",

diff --git a/packages/rocketchat-i18n/i18n/de.i18n.json b/packages/rocketchat-i18n/i18n/de.i18n.json
@@ -92,6 +92,7 @@
   "Accounts_OAuth_Custom_Token_Path": "Pfad des Token",
   "Accounts_OAuth_Custom_Token_Sent_Via": "Token gesendet über",
   "Accounts_OAuth_Custom_Username_Field": "Feld für Benutzernamen",
+  "Accounts_OAuth_Custom_Roles_Claim": "Rollen/Gruppen Feld",
   "Accounts_OAuth_Drupal": "Anmeldung über Drupal",
   "Accounts_OAuth_Drupal_callback_url": "Drupal OAuth Redirect Url",
   "Accounts_OAuth_Drupal_id": "Drupal oAuth2 Client ID",

diff --git a/packages/rocketchat-i18n/i18n/el.i18n.json b/packages/rocketchat-i18n/i18n/el.i18n.json
@@ -86,6 +86,7 @@
   "Accounts_OAuth_Custom_Token_Path": "Διαδρομή Token",
   "Accounts_OAuth_Custom_Token_Sent_Via": "Token που Αποστέλλεται Μέσω",
   "Accounts_OAuth_Custom_Username_Field": "Πεδίο ονόματος χρήστη",
+  "Accounts_OAuth_Custom_Roles_Claim": "Ονόματα πεδίων / ομάδων",
   "Accounts_OAuth_Drupal": "Η Σύνδεση Drupal είναι Ενεργοποιημένη",
   "Accounts_OAuth_Drupal_callback_url": "URI Ανακατεύθυνσης Drupal oAuth2",
   "Accounts_OAuth_Drupal_id": "Αναγνωριστικό Πελάτη Drupal oAuth2",

diff --git a/packages/rocketchat-i18n/i18n/en.i18n.json b/packages/rocketchat-i18n/i18n/en.i18n.json
@@ -92,6 +92,7 @@
   "Accounts_OAuth_Custom_Token_Path": "Token Path",
   "Accounts_OAuth_Custom_Token_Sent_Via": "Token Sent Via",
   "Accounts_OAuth_Custom_Username_Field": "Username field",
+  "Accounts_OAuth_Custom_Roles_Claim": "Roles/Groups field name",
   "Accounts_OAuth_Drupal": "Drupal Login Enabled",
   "Accounts_OAuth_Drupal_callback_url": "Drupal oAuth2 Redirect URI",
   "Accounts_OAuth_Drupal_id": "Drupal oAuth2 Client ID",

diff --git a/packages/rocketchat-i18n/i18n/eo.i18n.json b/packages/rocketchat-i18n/i18n/eo.i18n.json
@@ -86,6 +86,7 @@
   "Accounts_OAuth_Custom_Token_Path": "Token Path",
   "Accounts_OAuth_Custom_Token_Sent_Via": "Token Sendita Vojo",
   "Accounts_OAuth_Custom_Username_Field": "Uzulnomo kampo",
+  "Accounts_OAuth_Custom_Roles_Claim": "Rola / Grupaj kampa nomo",
   "Accounts_OAuth_Drupal": "Drupalo Salutnomo Enabled",
   "Accounts_OAuth_Drupal_callback_url": "Drupalo oAuth2 Alidirektila URI",
   "Accounts_OAuth_Drupal_id": "Drupalo oAuth2 Kliento-ID",

diff --git a/packages/rocketchat-i18n/i18n/es.i18n.json b/packages/rocketchat-i18n/i18n/es.i18n.json
@@ -89,6 +89,7 @@
   "Accounts_OAuth_Custom_Token_Path": "Ruta del Token",
   "Accounts_OAuth_Custom_Token_Sent_Via": "Token enviado vía",
   "Accounts_OAuth_Custom_Username_Field": "Campo de Nombre de Usuario",
+  "Accounts_OAuth_Custom_Roles_Claim": "Nombre del campo roles / grupos",
   "Accounts_OAuth_Drupal": "Inicio de sesión Drupal habilitado",
   "Accounts_OAuth_Drupal_callback_url": "URI de rediccionamiento de Drupal oAuth2",
   "Accounts_OAuth_Drupal_id": "ID del cliente de Drupal oAuth2",

diff --git a/packages/rocketchat-i18n/i18n/fa.i18n.json b/packages/rocketchat-i18n/i18n/fa.i18n.json
@@ -86,6 +86,7 @@
   "Accounts_OAuth_Custom_Merge_Users": "ادغام کاربران",
   "Accounts_OAuth_Custom_Scope": "محدوده",
   "Accounts_OAuth_Custom_Secret": "رمز",
+  "Accounts_OAuth_Custom_Roles_Claim": "نام زمینه / نام گروه",
   "Accounts_OAuth_Custom_Token_Path": "مسیر توکن",
   "Accounts_OAuth_Custom_Token_Sent_Via": "توکن فرستاده شد با",
   "Accounts_OAuth_Custom_Username_Field": "فیلد نام کاربری",

diff --git a/packages/rocketchat-i18n/i18n/fi.i18n.json b/packages/rocketchat-i18n/i18n/fi.i18n.json
@@ -86,6 +86,7 @@
   "Accounts_OAuth_Custom_Token_Path": "Token polku",
   "Accounts_OAuth_Custom_Token_Sent_Via": "Token lähetetty käyttäen",
   "Accounts_OAuth_Custom_Username_Field": "Käyttäjätunnus",
+  "Accounts_OAuth_Custom_Roles_Claim": "Roolien / ryhmien kentän nimi",
   "Accounts_OAuth_Drupal": "Drupal-kirjautuminen käytössä",
   "Accounts_OAuth_Drupal_callback_url": "Drupal oAuth2 Uudelleenohjata URI",
   "Accounts_OAuth_Drupal_id": "Drupal oAuth2-asiakastunnus",

diff --git a/packages/rocketchat-i18n/i18n/fr.i18n.json b/packages/rocketchat-i18n/i18n/fr.i18n.json
@@ -87,6 +87,7 @@
   "Accounts_OAuth_Custom_Token_Path": "URL de jeton",
   "Accounts_OAuth_Custom_Token_Sent_Via": "Jeton envoyé via",
   "Accounts_OAuth_Custom_Username_Field": "Champ nom d'utilisateur",
+  "Accounts_OAuth_Custom_Roles_Claim": "Nom du champ Rôles/Groupes",
   "Accounts_OAuth_Drupal": "Connexion Drupal activée",
   "Accounts_OAuth_Drupal_callback_url": "Drupal oAuth2 Redirection URI",
   "Accounts_OAuth_Drupal_id": "Drupal oAuth2 ID client",

diff --git a/packages/rocketchat-i18n/i18n/he.i18n.json b/packages/rocketchat-i18n/i18n/he.i18n.json
@@ -86,6 +86,7 @@
   "Accounts_OAuth_Meteor_secret": "סיסמת Meteor",
   "Accounts_OAuth_Twitter": "התחברות באמצעות טוויטר",
   "Accounts_OAuth_Twitter_callback_url": "כתובת האתר Callback Twitter",
+  "Accounts_OAuth_Custom_Roles_Claim": "שם שדה / קבוצות",
   "Accounts_OAuth_Twitter_id": "זיהוי טוויטר",
   "Accounts_OAuth_Twitter_secret": "סיסמת Twitter",
   "Accounts_OAuth_Wordpress": "התחברות WordPress",

diff --git a/packages/rocketchat-i18n/i18n/hr.i18n.json b/packages/rocketchat-i18n/i18n/hr.i18n.json
@@ -92,6 +92,7 @@
   "Accounts_OAuth_Custom_Token_Path": "Putanja Tokena",
   "Accounts_OAuth_Custom_Token_Sent_Via": "Token poslan putem",
   "Accounts_OAuth_Custom_Username_Field": "Polje korisničkog imena",
+  "Accounts_OAuth_Custom_Roles_Claim": "Naziv polja uloge / grupe",
   "Accounts_OAuth_Drupal": "Drupal Prijava omogućen",
   "Accounts_OAuth_Drupal_callback_url": "Drupal oAuth2 preusmjeravanje URI",
   "Accounts_OAuth_Drupal_id": "Drupal ID klijenta oAuth2",
@@ -2969,4 +2970,4 @@
   "Your_push_was_sent_to_s_devices": "Push obavijest je poslana %s uređaje",
   "Your_server_link": "Veza poslužitelja",
   "Your_workspace_is_ready": "Radni je prostor spreman za upotrebu 🎉"
-}
+}
diff --git a/packages/rocketchat-i18n/i18n/hu.i18n.json b/packages/rocketchat-i18n/i18n/hu.i18n.json
@@ -89,6 +89,7 @@
   "Accounts_OAuth_Custom_Token_Path": "Token Path",
   "Accounts_OAuth_Custom_Token_Sent_Via": "Token keresztül küldött",
   "Accounts_OAuth_Custom_Username_Field": "felhasználónév mező",
+  "Accounts_OAuth_Custom_Roles_Claim": "Szerepek / csoportok mező neve",
   "Accounts_OAuth_Drupal": "Drupal bejelentkezés engedélyezve",
   "Accounts_OAuth_Drupal_callback_url": "Drupal oAuth2 átirányító URI",
   "Accounts_OAuth_Drupal_id": "Drupal oAuth2 Ügyfél azonosító",
@@ -2844,4 +2845,4 @@
   "Your_push_was_sent_to_s_devices": "Push küldték %s eszközök",
   "Your_server_link": "A szerver linkje",
   "Your_workspace_is_ready": "A munkaterület készen áll a 🎉 használatára"
-}
+}
diff --git a/packages/rocketchat-i18n/i18n/id.i18n.json b/packages/rocketchat-i18n/i18n/id.i18n.json
@@ -86,6 +86,7 @@
   "Accounts_OAuth_Custom_Token_Path": "Token Path",
   "Accounts_OAuth_Custom_Token_Sent_Via": "Token Dikirim Via",
   "Accounts_OAuth_Custom_Username_Field": "Bidang Username",
+  "Accounts_OAuth_Custom_Roles_Claim": "Nama bidang Peran / Grup",
   "Accounts_OAuth_Drupal": "Login Drupal Diaktifkan",
   "Accounts_OAuth_Drupal_callback_url": "Drupal oAuth2 Redirect URI",
   "Accounts_OAuth_Drupal_id": "ID Klien Drupal oAuth2",

diff --git a/packages/rocketchat-i18n/i18n/it.i18n.json b/packages/rocketchat-i18n/i18n/it.i18n.json
@@ -92,6 +92,7 @@
   "Accounts_OAuth_Custom_Token_Path": "Percorso del token",
   "Accounts_OAuth_Custom_Token_Sent_Via": "Token inviato tramite",
   "Accounts_OAuth_Custom_Username_Field": "Campo nome utente",
+  "Accounts_OAuth_Custom_Roles_Claim": "Nome del campo Ruoli / Gruppi",
   "Accounts_OAuth_Drupal": "Drupal Login abilitato",
   "Accounts_OAuth_Drupal_callback_url": "URI di re-indirizzamento oAuth2 Drupal ",
   "Accounts_OAuth_Drupal_id": "ID cliente oAuth2 Drupal",
@@ -2838,4 +2839,4 @@
   "Your_push_was_sent_to_s_devices": "La tua richiesta è stata inviata ai %s dispositivi.",
   "Your_server_link": "Il tuo collegamento al server",
   "Your_workspace_is_ready": "Il tuo spazio di lavoro è pronto per l'uso 🎉"
-}
+}
diff --git a/packages/rocketchat-i18n/i18n/ja.i18n.json b/packages/rocketchat-i18n/i18n/ja.i18n.json
@@ -92,6 +92,7 @@
   "Accounts_OAuth_Custom_Token_Path": "トークンパス",
   "Accounts_OAuth_Custom_Token_Sent_Via": "トークン送信元",
   "Accounts_OAuth_Custom_Username_Field": "ユーザー名フィールド",
+  "Accounts_OAuth_Custom_Roles_Claim": "役割/グループフィールド名",
   "Accounts_OAuth_Drupal": "Drupalログインを有効にする",
   "Accounts_OAuth_Drupal_callback_url": "Drupal oAuth2リダイレクトURI",
   "Accounts_OAuth_Drupal_id": "Drupal oAuth2クライアントID",

diff --git a/packages/rocketchat-i18n/i18n/km.i18n.json b/packages/rocketchat-i18n/i18n/km.i18n.json
@@ -90,6 +90,7 @@
   "Accounts_OAuth_Custom_Token_Path": "ទីទាំង Token",
   "Accounts_OAuth_Custom_Token_Sent_Via": "សញ្ញាសម្ងាត់បានផ្ញើតាមរយៈ",
   "Accounts_OAuth_Custom_Username_Field": "វាលឈ្មោះអ្នកប្រើ",
+  "Accounts_OAuth_Custom_Roles_Claim": "ឈ្មោះវាល / ក្រុម",
   "Accounts_OAuth_Drupal": "Drupal Login Enabled",
   "Accounts_OAuth_Drupal_callback_url": "Drupal oAuth2 ប្ដូរទិស URI",
   "Accounts_OAuth_Drupal_id": "Drupal oAuth2 លេខសម្គាល់អតិថិជន",

diff --git a/packages/rocketchat-i18n/i18n/ko.i18n.json b/packages/rocketchat-i18n/i18n/ko.i18n.json
@@ -90,6 +90,7 @@
   "Accounts_OAuth_Custom_Token_Path": "Token 경로",
   "Accounts_OAuth_Custom_Token_Sent_Via": "보내진 토큰",
   "Accounts_OAuth_Custom_Username_Field": "사용자 이름 필드",
+  "Accounts_OAuth_Custom_Roles_Claim": "역할 / 그룹 필드 이름",
   "Accounts_OAuth_Drupal": "듀팔 로그인 이 활성화 되었습니다.",
   "Accounts_OAuth_Drupal_callback_url": "듀팔 oAuth2 리다이렉트 URI",
   "Accounts_OAuth_Drupal_id": "듀팔 oAuth2 클라이언트 ID",

diff --git a/packages/rocketchat-i18n/i18n/ku.i18n.json b/packages/rocketchat-i18n/i18n/ku.i18n.json
@@ -86,6 +86,7 @@
   "Accounts_OAuth_Custom_Token_Path": "Path token",
   "Accounts_OAuth_Custom_Token_Sent_Via": "Token Sent Via",
   "Accounts_OAuth_Custom_Username_Field": "Qada bikarhêner",
+  "Accounts_OAuth_Custom_Roles_Claim": "Roles/Groups field name",
   "Accounts_OAuth_Drupal": "Têketina Drupal Enabled",
   "Accounts_OAuth_Drupal_callback_url": "Drupal oAuth2 URI Beralîkirin",
   "Accounts_OAuth_Drupal_id": "Nasnameya oleuth2 Drupal",