[Feature] Support oauth group check for admin/user

I have searched the existing feature requests, both open and closed, to make sure this is not a duplicate request.

• Yes

The feature

Immich currently does support OAuth login, but requires a custom claim for determining if a user is an admin or user. It would be valuable if immich could take in a groups claim and determine if the user is admin based on if a user is apart of the entered group.

It would require immich to know which claim has the list of groups, and which group asserts admin.

Ie:

Voidauth at the moment does support "groups" scope, which does send the following claim:
"groups": ["group1", "group2"]

It'd be wonderful is immich could parse that the user is apart "group2" and assign them admin.

Platform

• Server
• Web
• Mobile