From ada770c9e62fea7c273f765900eaf1527b63b946 Mon Sep 17 00:00:00 2001
From: Daniel Kaiser <daniel.kaiser94@gmail.com>
Date: Mon, 4 Apr 2022 14:22:47 +0200
Subject: [PATCH] Update oidc_server.js

---
 packages/wekan-oidc/oidc_server.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/packages/wekan-oidc/oidc_server.js b/packages/wekan-oidc/oidc_server.js
index 9f0a9e190..0ce17dc3d 100644
--- a/packages/wekan-oidc/oidc_server.js
+++ b/packages/wekan-oidc/oidc_server.js
@@ -88,7 +88,7 @@ OAuth.registerService('oidc', 2, null, function (query) {
   // data needs to be treated  differently.
   // use case: in oidc provider no scope is set, hence no group attributes.
   //    therefore: keep admin privileges for wekan as before
-  if(typeof serviceData.groups[0] === "string" )
+  if(Array.isArray(serviceData.groups) && serviceData.groups.length && typeof serviceData.groups[0] === "string" )
   {
     user = Meteor.users.findOne({'_id':  serviceData.id});