ExtractGroupValues introduces new behavior (fallback across multiple possible group claim types and case-insensitive de-duping). Please add/extend unit tests to cover at least one fallback claim type (e.g., group or ClaimTypes.GroupSid) and verify behavior when CloudflareAccess:AdminGroupClaimType is set to a non-default value.
ExtractGroupValues introduces new behavior (fallback across multiple possible group claim types and case-insensitive de-duping). Please add/extend unit tests to cover at least one fallback claim type (e.g., group or ClaimTypes.GroupSid) and verify behavior when CloudflareAccess:AdminGroupClaimType is set to a non-default value.