-
Notifications
You must be signed in to change notification settings - Fork 545
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add a post authenticaton handler to validate email domain during federated authentication #6177
base: master
Are you sure you want to change the base?
Conversation
Codecov ReportAttention: Patch coverage is
Additional details and impacted files@@ Coverage Diff @@
## master #6177 +/- ##
============================================
+ Coverage 45.62% 45.63% +0.01%
+ Complexity 14159 14146 -13
============================================
Files 1633 1634 +1
Lines 101439 101534 +95
Branches 17928 17880 -48
============================================
+ Hits 46277 46338 +61
- Misses 48427 48448 +21
- Partials 6735 6748 +13
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Sentry. |
b25fbc7
to
f2d9736
Compare
f2d9736
to
f5cda0f
Compare
.../application/authentication/framework/handler/request/impl/EmailDomainValidationHandler.java
Outdated
Show resolved
Hide resolved
.../application/authentication/framework/handler/request/impl/EmailDomainValidationHandler.java
Outdated
Show resolved
Hide resolved
.../application/authentication/framework/handler/request/impl/EmailDomainValidationHandler.java
Outdated
Show resolved
Hide resolved
.../application/authentication/framework/handler/request/impl/EmailDomainValidationHandler.java
Outdated
Show resolved
Hide resolved
.../application/authentication/framework/handler/request/impl/EmailDomainValidationHandler.java
Show resolved
Hide resolved
.../application/authentication/framework/handler/request/impl/EmailDomainValidationHandler.java
Outdated
Show resolved
Hide resolved
.../application/authentication/framework/handler/request/impl/EmailDomainValidationHandler.java
Outdated
Show resolved
Hide resolved
...lication/authentication/framework/handler/request/impl/EmailDomainValidationHandlerTest.java
Outdated
Show resolved
Hide resolved
...lication/authentication/framework/handler/request/impl/EmailDomainValidationHandlerTest.java
Outdated
Show resolved
Hide resolved
.../java/org/wso2/carbon/identity/application/authentication/framework/util/FrameworkUtils.java
Outdated
Show resolved
Hide resolved
Quality Gate passedIssues Measures |
All above comments are addressed with a338dc7 |
Proposed changes in this pull request
This pr introduces a new post authentication handler to validate the email address of the user authenticated from a federated IDP.
This handler will be invoked when email domain based organization discovery is enabled to prevent user authentication and provisioning to organizations when the authenticated user's email domain does not match with any of the mapped email domains for the organization.
Related issue