Open k-allagbe opened 11 months ago
Related requirement: client apps should be able to tell membrane-backend which email domains are acceptable... and that should be subject to change whenever the client apps wants so should get passed through the initial JWT token from client app to membrane-backend.
Description
Currently, Membrane handles authentication, allowing users to verify their identity. However, it lacks an authorization mechanism to manage permissions and control what resources a user can access.