RBAC using Okta - no roles/groups mapped

[ragavse]

I like to implement RBAC with okta but got below error, can someone kindly help me with this ? the app loads fine if I do not use RBAC configurations.

When I preview the token, I see claims are added only to the idtoken and not in access token. could this be a reason ?

LOGS:
[30m2024-07-22 20:07:23,417�[0;39m �[39mDEBUG�[0;39m [�[34mreactor-http-epoll-3�[0;39m] �[33mi.k.u.s.r.e.OauthAuthorityExtractor�[0;39m: Param missing from attributes, skipping

yaml Configurations:

yamlApplicationConfig:
  kafka:
    clusters:
      - name: <<ClusterName>
        bootstrapServers: <<Broker url>>
        properties:
          security.protocol: SASL_SSL
          sasl.mechanism: AWS_MSK_IAM
          sasl.client.callback.handler.class: software.amazon.msk.auth.iam.IAMClientCallbackHandler
          sasl.jaas.config: software.amazon.msk.auth.iam.IAMLoginModule required;
  auth:
    type: OAUTH2
    oauth2:
      client:
        okta:
          clientId:
          clientSecret:
          scope: [ 'openid', 'profile', 'email', 'groups' ]
          client-name: Okta
          provider: okta
          redirect-uri: http://<< internal >>/login/oauth2/code/okta
          authorization-grant-type: authorization_code
          issuer-uri: https://<< internal >>.oktapreview.com
          jwk-set-uri: https://<< internal >>.oktapreview.com/oauth2/v1/keys?client_id=<< Client id >>
          user-name-attribute: email
          custom-params:
            type: oauth
            roles-field: groups
  rbac:
    roles:
      - name: "Editors"
        clusters:
          - <<ClusterName>
        subjects:
          - provider: oauth
            type: role
            value: "Editors"
        permissions:
          - resource: topic
            value: ".*"
            actions:
              - VIEW
              - MESSAGES_READ
              - EDIT
              - CREATE
              - EDIT
              - MESSAGES_PRODUCE

Result:

Okta Groups claim:

[Haarolean]

duplicate of #496