aashutoshrathi / Student-Lifecycle-Management

Student Portal for Colleges
MIT License
9 stars 3 forks source link

Set up OAuth2 for only for iiitvadodara.ac.in emails #8

Open aashutoshrathi opened 6 years ago

Monal5031 commented 6 years ago

Is there any such thing to restrict the domains?

anshumanv commented 6 years ago

Not sure, motive behind this btw?

Monal5031 commented 6 years ago

The portal should remain accessible only to the students of that institutes

anshumanv commented 6 years ago

I think it's easy to get the details of the email the user enrolls with, if it matches what we want then we allow auth else reject it.

Monal5031 commented 6 years ago

Exactly that's what the issue demands @anshumanv but the thing here is that we don't know if we have access to the email in between of the OAuth or we can only have it after the registration

anshumanv commented 6 years ago

Okay fuck, I thought this issue is in cerebro webapp.

HarshDobariya79 commented 1 year ago

We can create the authentication API in google cloud from an email having iiitvadodara.ac.in and set the User type to internal. If anyone outside of that domain tries to login, google will reject the request.

image