Supporting multiple domains

[iakat]

Hello!

Is there support for multiple oauth domains?

Thanks.

[InfoSec812]

I'm not sure how that would work with Google OAuth. I'd be happy to review a pull request.

[trajano]

Wouldn't this be a matter of checking the email address being returned in the user profile can confirming it is in the whitelist specified in sonar.auth.googleoauth.limitOauthDomain

[InfoSec812]

@trajano The limitOauthDomain is a setting which is sent as part of the OAuth challenge to Google, so the domain needs to be determined BEFORE the flow begins.

[roelandpinch]

We needed this support as well and changed the code, and we are testing it now. Perhaps this can be useful for you as well @chauffer ?
roelandpinch@2625885

[iakat]

Thank you very much for the tag @roelandpinch! It will be useful.

[InfoSec812]

@roelandpinch Would you mind submitting a PR and we'll get this integrated?

[roelandpinch]

@InfoSec812 Sure, I have submitted the PR!

[ErenPhayte]

Has this been reviewed yet? Just came across the same issue.

#22

[InfoSec812]

As mentioned in the project README:

This Plugin Is No Longer Maintained

After trying to keep this updated for some time, I have just not been able to with all of my other demands. If anyone would like to take this project over, you are welcome to. As an alternative, you can use oauth2-proxy and HTTP Header Authentication to support ANY OAuth2/OIDC provider.