Hi Folk, I have an application which is shared with multiple organization in casdoor. I need to make sure that only users from built-in organization can login to casdoor console and users from all other organization should be able to be authorized via oauth flow but not be able to login into casdoor itself. Is it possible to do in casdoor?
in casdoor you can create application. Per application you must defined from which organisation / user pool can login and create custom login forms and endpoints. I think, thats what you need?
@alphyron Thanks for the response. What I am looking for is a bit different I think. Essentially what I want is to block POST /api/login API call where payload does not have type set to code for all users other than users in built-in organization. i.e. Allow user to authorise themself via oauth flow but do not allow them to login to casdoor dasboard.
can you create a github issue?
Sure. Thanks
Join the conversation
Sign up to reply, like and follow topics.
Suggested Topics
Want to read more? Browse other topics in Casdoor or view latest topics.
1 / 5
Jan 2025
