setRedirectURL($redirectUrl);
$oidc->addScope(['openid', 'profile', 'email']);
// Complete the OAuth2 flow (exchange code for tokens)
$oidc->authenticate();
// Get user information from Keycloak
$userInfo = $oidc->requestUserInfo();
// Extract email from Keycloak response
$email = $userInfo->email ?? null;
if (!$email) {
throw new \Exception('Keycloak did not return an email address.');
}
// Find admin user in Vvveb database using Vvveb API
// Only get active admins (status = 1)
$adminInfo = Admin::get([
'email' => $email,
'status' => 1,
]);
if (!$adminInfo) {
// User not found or not active
http_response_code(403);
?>
Access Denied
Access Denied
The email is not registered as an active admin in Vvveb.
Please contact your administrator to grant access.