ever-co / ever-traduora

Ever® Traduora™ - Open Translation Management Platform - https://traduora.co
https://traduora.co
GNU Affero General Public License v3.0
1.99k stars 200 forks source link

Google OAuth domain restriction #345

Open prince11jose opened 1 year ago

prince11jose commented 1 year ago

Describe the bug Can domain restriction be done for google oauth enterprise accounts, to allow only specific domain emails should be allowed to login.

evereq commented 1 year ago

Hi @prince11jose do you mean we need to have somewhere in Admin UI a list of domains for emails that are allowed to log in? Will that be enough?

prince11jose commented 1 year ago

Hi @evereq, it need not be in the admin UI but in the env-vars where we set up Google OAuth credentials. If you can mention an array, allowed_domains: ['example.com','example1.com']. Then it can be secured within the domain instead of allowing any gmail id to login.