Filter AD users based on their groups

ad_user_group_rule.js

function(user, context, callback) {
  var _ = require('lodash');

  var groupsAllowed = ['group1', 'group2', 'group3'];
  
  var userHasAccess = _.intersection(user.groups, groupsAllowed) > 0;

  if (!userHasAccess) {
    return callback(new UnauthorizedError('Access denied.'));
  }

  callback(null, user, context);
}