graphql-hive / graphql-hive/console
add option to enforce OIDC login if email ends with registered domain
Open
- Dominant language
- TypeScript
- Stars
- 483
- Forks
- 145
- Avg merge
- 2d 5h
- Merged PRs (30d)
- 65
Description
Organizations that proofed ownership of a domain should be allowed to force any user attempting to log in with that email domain being prompted through the OIDC login flow and denying them from logging in with email or social login.
The org admin needs to be an exception, so the OIDC configuration can still be altered in case of missed credential rotations or similar.
Resources:
- https://github.com/graphql-hive/console/issues/7735
Contributor guide
Assessment
This issue has not been assessed yet.