Merge pull request #43 from City-of-Helsinki/UHF-X-kasko-role-mapping

Disable openid_connect role mapping

helfi_tunnistamo.install

@@ -20,6 +20,8 @@ function helfi_tunnistamo_install() : void {
     ->set('user_login_display', 'below')
     // Logout from openid connect provider by default.
     ->set('end_session_enabled', TRUE)
+    // Do not map roles in openid_connect module.
+    ->set('role_mappings', [])
     ->save();
 }
 
@@ -59,3 +61,17 @@ function helfi_tunnistamo_update_9003() : void {
       ->save();
   }
 }
+
+/**
+ * UHF-X: Remove all openid_connect role mappings.
+ *
+ * Tunnistamo module has its own role mapping.
+ *
+ * @see \Drupal\helfi_tunnistamo\Plugin\OpenIDConnectClient\Tunnistamo::mapRoles()
+ */
+function helfi_tunnistamo_update_9004() : void {
+  \Drupal::configFactory()
+    ->getEditable('openid_connect.settings')
+    ->set('role_mappings', [])
+    ->save();
+}