AD_ALLOWED_LOGINS support

2026-04-18 03:16:01 +00:00 · 2022-11-27 18:32:01 +01:00
parent 592865b16e
commit 8489c171f3
1 changed files with 6 additions and 0 deletions
--- a/packages/api/src/controllers/auth.js
+++ b/packages/api/src/controllers/auth.js
@@ -108,6 +108,12 @@ module.exports = {
        if (!res) {
          return { error: 'Login failed' };
        }
+        if (
+          process.env.AD_ALLOWED_LOGINS &&
+          !process.env.AD_ALLOWED_LOGINS.split(',').find(x => x.toLowerCase().trim() == login.toLowerCase().trim())
+        ) {
+          return { error: `Username ${login} not allowed to log in` };
+        }        
        return {
          accessToken: jwt.sign({ login }, tokenSecret, { expiresIn: getTokenLifetime() }),
        };