fix: SSO with Jumpcloud "email_verified" field argoproj#12257 (argoproj#12318)

Signed-off-by: Son Bui <[email protected]>

Author: sonbui00

server/auth/types/claims.go

@@ -12,7 +12,7 @@ type Claims struct {
 	jwt.Claims
 	Groups                  []string               `json:"groups,omitempty"`
 	Email                   string                 `json:"email,omitempty"`
-	EmailVerified           bool                   `json:"email_verified,omitempty"`
+	EmailVerified           bool                   `json:"-"`
 	Name                    string                 `json:"name,omitempty"`
 	ServiceAccountName      string                 `json:"service_account_name,omitempty"`
 	ServiceAccountNamespace string                 `json:"service_account_namespace,omitempty"`
@@ -52,6 +52,10 @@ func (c *Claims) UnmarshalJSON(data []byte) error {
 		return err
 	}
 
+	if localClaim.RawClaim["email_verified"] == true || localClaim.RawClaim["email_verified"] == "true" {
+		localClaim.EmailVerified = true
+	}
+
 	*c = Claims(localClaim)
 	return nil
 }

server/auth/types/claims_test.go

@@ -134,6 +134,28 @@ func TestUnmarshalJSON(t *testing.T) {
 				},
 			},
 		},
+		{
+			description: "email verify field as string",
+			data:        `{"email_verified":"true"}`,
+			expectedErr: nil,
+			expectedClaims: &Claims{
+				RawClaim: map[string]interface{}{
+					"email_verified": "true",
+				},
+				EmailVerified: true,
+			},
+		},
+		{
+			description: "email verify field as bool",
+			data:        `{"email_verified":true}`,
+			expectedErr: nil,
+			expectedClaims: &Claims{
+				RawClaim: map[string]interface{}{
+					"email_verified": true,
+				},
+				EmailVerified: true,
+			},
+		},
 		{
 			description: "unmarshal no data",
 			data:        `{}`,