OK, so here’s my situation: I have a blacklist with one domain on it, but we also have a custom authenticator plugin which is allowed to authenticate users with addresses in that domain. What I want to avoid is a user creating an account using an address from the special domain (using our custom authenticator to do so), but then later using GitHub login with that email address as one of their addresses. I haven’t read the code in the link above, but I believe that our desired behavior should work, as GitHubAuthenticator should reject the login if any address provided by github.com is in a blacklist domain.
kpfleming
(Kevin P. Fleming)
4
相关话题
| 话题 | 回复 | 浏览量 | 活动 | |
|---|---|---|---|---|
| Improve GitHub login for private sites | 9 | 2158 | 2016 年9 月 23 日 | |
| OAuth-based login: Disable account merging | 5 | 1306 | 2016 年2 月 27 日 | |
| Two emails for one user | 48 | 15732 | 2017 年6 月 20 日 | |
| Disable password auth and logging in as admin account | 0 | 284 | 2024 年4 月 2 日 | |
| Switching from GitHub auth to OAuth2 | 9 | 2997 | 2019 年7 月 29 日 |