# HG changeset patch
# User Kim Alvefur <zash@zash.se>
# Date 1683479272 -7200
# Node ID f75d95f27da756ebab4445b31fb6f7862de342a4
# Parent  3b30635d215cdab3df6b604b296fa0562824cf4f
mod_http_oauth2: Add function for filtering roles

diff -r 3b30635d215c -r f75d95f27da7 mod_http_oauth2/mod_http_oauth2.lua
--- a/mod_http_oauth2/mod_http_oauth2.lua	Sun May 07 19:29:15 2023 +0200
+++ b/mod_http_oauth2/mod_http_oauth2.lua	Sun May 07 19:07:52 2023 +0200
@@ -116,6 +116,12 @@
 	return usermanager.user_can_assume_role(username, module.host, requested_role);
 end
 
+local function user_assumable_roles(username, requested_roles)
+	return array.filter(requested_roles, function(role)
+		return can_assume_role(username, role);
+	end);
+end
+
 local function select_role(username, requested_roles)
 	if requested_roles then
 		for _, requested_role in ipairs(requested_roles) do