auth-backend: getEntityClaims make sure target is group kind

We are interested in the User isMemberOf Group relation. So this is just an additional check that the target is of Group kind.

Signed-off-by: Himanshu Mishra <himanshu@orkohunter.net>

plugins/auth-backend/src/lib/catalog/helpers.ts

@@ -26,7 +26,11 @@ export function getEntityClaims(entity: UserEntity): TokenParams['claims'] {
 
   const membershipRefs =
     entity.relations
-      ?.filter(r => r.type === RELATION_MEMBER_OF)
+      ?.filter(
+        r =>
+          r.type === RELATION_MEMBER_OF &&
+          r.target.kind.toLocaleLowerCase() === 'group',
+      )
       .map(r => stringifyEntityRef(r.target)) ?? [];
 
   return {