Extract only shared roles from the user's role list when login to a shared app

[ShanChathusanda93]

Proposed changes in this pull request

• $subject
• When login with organization SSO flow, the user's role list will be extracted from the userinfo call.
• When getting the roles, only shared roles will be picked if the accessing app is a shared app

[codecov]

Codecov Report

Attention: Patch coverage is 45.45455% with 18 lines in your changes missing coverage. Please review.

Project coverage is 56.53%. Comparing base (3d191a2) to head (64415f6).
Report is 18 commits behind head on master.

Files with missing lines	Patch %	Lines
...carbon/identity/oauth/endpoint/util/ClaimUtil.java	45.45%	11 Missing and 7 partials ⚠️

Additional details and impacted files

@@             Coverage Diff              @@
##             master    #2703      +/-   ##
============================================
- Coverage     56.54%   56.53%   -0.02%     
- Complexity     8543     8555      +12     
============================================
  Files           654      654              
  Lines         48522    48607      +85     
  Branches      10131    10144      +13     
============================================
+ Hits          27436    27479      +43     
- Misses        17172    17228      +56     
+ Partials       3914     3900      -14     

Flag	Coverage Δ
unit	39.93% <45.45%> (+0.16%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[AnuradhaSK]

For the ID token is this properly handled ? Hope this is the place

identity-inbound-auth-oauth/components/org.wso2.carbon.identity.oauth/src/main/java/org/wso2/carbon/identity/openidconnect/OIDCClaimUtil.java

Line 512 in 07f4172

String[] appAssocatedRolesOfUser = getAppAssociatedRolesOfUser(authenticatedUser,

[jenkins-is-staging]

PR builder started
Link: https://github.com/wso2/product-is/actions/runs/13326284949

[jenkins-is-staging]

PR builder completed
Link: https://github.com/wso2/product-is/actions/runs/13326284949
Status: failure

[sadilchamishka]

Let's refactor the code for better readbility.
Ex:
if (CollectionUtils.isEmpty(userRoles)) {
return rolesAssociatedWithApp;
}

[sadilchamishka]

Let's apply the same comment for here also. Avoiding the code right shifting will increase the readability.

[sadilchamishka]

We may not need to get the role object in order to decide whether this is shared role or not.
We can try to get the main role, if it exist it is a shared role.
What need to check is whether we have to db calls for both approaches or any approach is backed by cache.