M
@alphyron Thanks for the response. What I am looking for is a bit different I think. Essentially what I want is to block POST /api/login API call where payload does not have type set to code for all users other than users in built-in organization. i.e. Allow user to authorise themself via oauth flow but do not allow them to login to casdoor dasboard.
This forum runs on Casnode, an open-source forum with the look and features of Discourse, built with Go and Next.js. See what it can do on the Casnode demo site.
Try the Casnode demo