title: AWS AppSync oidc authentication
body: <p>I have added an oidc auth provider for my AppSync application. Users are now authenticated. However, I want to also authorize the users, meaning I want fine grained access control in my schema.</p>
  <p>I have seen something about @aws_oidc(groups: [&quot;admin&quot;]) being used. But does not work for me. My idtoken consists of groups, name etc.</p>
  <p>How can I setup this using @aws_oidc?</p>