Casbin Forum runs on Casnode, the open-source Discourse-style forum. Try the Casnode demo →
Casbin Forum

Hi Folk, I have an application which is shared with multiple organization in casdoor. I need to make sure that only users from built-in organization can login to casdoor console and users from all other organization should be able to be authorized via oauth flow but not be able to login into casdoor itself. Is it possible to do in casdoor?

1views
3users
1 minread

in casdoor you can create application. Per application you must defined from which organisation / user pool can login and create custom login forms and endpoints. I think, thats what you need?

@alphyron Thanks for the response. What I am looking for is a bit different I think. Essentially what I want is to block POST /api/login API call where payload does not have type set to code for all users other than users in built-in organization. i.e. Allow user to authorise themself via oauth flow but do not allow them to login to casdoor dasboard.

1 / 5
Jan 2025