Dex should not allow logins with empty groups assigned to the user

[Marcel2603]

Preflight Checklist

• I agree to follow the Code of Conduct that this project adheres to.
• I have searched the issue tracker for an issue that matches the one I want to file, without success.
• I am not looking for support or already pursued the available support channels without success.

Version

2.39.1

Storage Type

Kubernetes

Installation Type

Official Helm chart

Expected Behavior

If a user logs in via ldap, dex will verify the user and if the user don't has any group attached, he will be getting an 403.

Actual Behavior

The user can sucessfully login and has no groups in the system.

Steps To Reproduce

1. Configure Dex with Ldap
2. Login with a User who matches the Userfilter but has noch Group inside the Groupfilter
3. Login will be successful

Additional Information

No response

Configuration

No response

Logs

No response

[nabokihms]

@Marcel2603 hello! Is this a degradation after an upgrade? I believe it always works as you described in the actual behavior.

[Suro4ek]

I use github provider, but i see this problem