Closed 0mar closed 2 months ago
Thanks for working on this. At the moment it's going to silently break most existing users who only have a single domain. Even if we highlight it in a changelog it's likely to be missed.
I can think of two options:
Thanks for the feedback. The second option sounds like it covers the most use cases, so I've gone with that one
Taking a stab at #733.
I added a switch to the Google OAuthenticator to explicitly indicate whether domains should be stripped, which by default is set to False. If set to True, domain names will be stripped, and if in addition there are multiple domains specified, a warning will be produced. Perhaps this should be an error instead?
Closes #733