Add Cognito groups to auth context and user profile

[raylrui]

What

Surfaces the cognito:groups JWT claim in the auth context and displays it in the User Profile modal.

Why

Group membership was only accessible by manually decoding the JWT token. Exposing it via the auth context makes it available app-wide for consistent display and future RBAC use.

Changes

Auth provider (AmplifyAuthProvider.tsx)

• Calls fetchAuthSession() in parallel with fetchUserAttributes() during auth initialisation (reads from local cache — no extra network round-trip)
• Extracts cognito:groups from the ID token payload
• Normalises autogenerated Cognito IDP group names (e.g. ap-southeast-2_iWOHnsurL_Google → Google (default)) before storing in context, so all consumers receive friendly names

Auth context (auth-context.ts)

• Adds groups: string[] to AuthContextValue

User Profile modal (UserProfileModal.tsx)

• Accepts groups prop and renders a Groups section as pill badges (hidden when empty)

User menu (UserMenu.tsx)

• Passes groups from useAuthContext() to UserProfileModal

Notes

• Normalisation regex: /^[a-z]+-[a-z]+-\d+_[A-Za-z0-9]+_(\w+)$/ — matches the {region}_{poolId}_{Provider} Cognito pattern and renders the provider suffix with (default) label
• Non-IDP groups (e.g. admin, bioinfo, curators) pass through unchanged

[Copilot]

Pull request overview

This pull request exposes Cognito group membership (cognito:groups from the ID token) via the app’s auth context and surfaces it in the User Profile modal so group info is available consistently across the UI (and for future RBAC usage).

Changes:

• Adds groups: string[] to the AuthContextValue and auth provider state, populated from fetchAuthSession() during initialization.
• Normalizes Cognito’s autogenerated federated-IDP group names into friendlier labels before storing them in context.
• Displays groups in the User Profile modal and wires the prop through UserMenu; updates existing layout tests’ auth mocks.

Reviewed changes

Copilot reviewed 6 out of 6 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
src/context/auth-context.ts	Extends the auth context value type to include groups: string[].
src/context/AmplifyAuthProvider.tsx	Fetches auth session alongside user attributes, extracts/normalizes cognito:groups, and stores it in provider state/context.
src/components/layout/header/UserProfileModal.tsx	Adds optional groups prop and renders a Groups section with pill badges when non-empty.
src/components/layout/header/UserMenu.tsx	Passes groups from useAuthContext() into UserProfileModal.
src/components/layout/tests/Header.test.tsx	Updates AuthContextValue test mock to include groups.
src/components/layout/tests/app-shell.test.tsx	Updates AuthContextValue test mock to include groups.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.