search

ajmyyra / ambassador-auth-oidc

OpenID Connect AuthService for Ambassador API Gateway
MIT License
88 stars 35 forks source link

Allow limiting users based on userinfo #3

Open ajmyyra opened 5 years ago

ajmyyra commented 5 years ago

Currently every user able to login at OIDC endpoint will be let in. Make it possible to limit users, for example with email domain or if their email_verified is set to true.

travisghansen commented 5 years ago

Inspired by this and other projects, I started a generic external auth service that I'd be interested to have your feedback on: https://github.com/travisghansen/external-auth-server

I haven't specifically added assertions based on userinfo yet, but I'm real close. I'd love another set of eyes if you have any interest.

ajmyyra commented 5 years ago

Looks cool, really great to have more generic approach to the issue! I'll take a look in a few days when I've got time (just got back from vacation, so jetlag is a thing :)

travisghansen commented 5 years ago

Great! Assertions have been implemented now for both id_token and userinfo data..