Leonid created OPENMEETINGS-1881:
------------------------------------
Summary: OAuth - add "Strict to domain(s)" field
Key: OPENMEETINGS-1881
URL: https://issues.apache.org/jira/browse/OPENMEETINGS-1881
Project: Openmeetings
Issue Type: Improvement
Components: OAuth
Reporter: Leonid
Assignee: Maxim Solodovnik
It would be a good practice to add OAuth login strictly for specified domain
(at least for those who use Google domain (G-Suite) service).
As I've figured out, at this point everyone, who own any Google account
(personal or company) can log in to the OM system.
Actually, it would be a good-to-have-feature which can allow specify 1+ domain,
which is allowed it's users to log into the OM.
Here's the article (really old one), which might be useful for developers -
[https://stackoverflow.com/questions/10858813/restrict-login-email-with-google-oauth2-0-to-specific-domain-name]
P.S. I understand, that adding field for all kinds of OAuth services might be
unacceptable, so it can be replaced as an external file with domains per-line,
which will be parsed by Google OAuth script.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
