Casbin Forum runs on Casnode, the open-source Discourse-style forum. Try the Casnode demo →
Casbin Forum
M

@alphyron Thanks for the response. What I am looking for is a bit different I think. Essentially what I want is to block POST /api/login API call where payload does not have type set to code for all users other than users in built-in organization. i.e. Allow user to authorise themself via oauth flow but do not allow them to login to casdoor dasboard.

M

Hi Folk, I have an application which is shared with multiple organization in casdoor. I need to make sure that only users from built-in organization can login to casdoor console and users from all other organization should be able to be authorized via oauth flow but not be able to login into casdoor itself. Is it possible to do in casdoor?