nextcloud / user_external

👥 External user authentication methods like IMAP, SMB and FTP
https://apps.nextcloud.com/apps/user_external
109 stars 65 forks source link

restrict IMAP login to specific domain, but use full email and don't stripe the domain part #76

Closed agarek closed 5 years ago

agarek commented 5 years ago

For security reasons would be great to add possibility limit OC_User_IMAP (or other methods as well) for specified domain(s) to avoid trying login with not-alowed email domains.

And add control function to check if login email domain belongs under alowed domains list. If not, do not try to ask IMAP for login.

violoncelloCH commented 5 years ago

yes this would makes sense! an additional parameter could store a boolean value whether to stripe the domain or not (where the default would be to stripe it; as it is now)...