MyMICDS / MyMICDS-v2

Back-end REST API for MyMICDS.net
https://mymicds.net
GNU Affero General Public License v3.0
8 stars 5 forks source link

Prevent signups using google group emails #56

Open JackCai1206 opened 6 years ago

nickbclifford commented 4 years ago

After looking into this a bit more, I don't think it's possible to programmatically check if a given email address is a mailing list/group or not. Our best option here might just be to hardcode a list of disallowed possible usernames, and we could probably ask the help desk for the mailing lists they have active.

michaelgira23 commented 4 years ago

Are we unable to use the Google Groups API? We might be able to obtain a list of the groups through this:

https://developers.google.com/admin-sdk/directory/v1/reference/groups/list

nickbclifford commented 4 years ago

I'm pretty sure that requires admin access to the MICDS G Suite.

nickbclifford commented 4 years ago

Something to consider: I'm fairly sure that switching our authentication process to Google OAuth would make this a non-issue.