Skip to content

OAuth example should not infer org affiliation from the email field. #70

@algal

Description

@algal

This example parses the user's email, returned from Google's authorization server, in order to determine if the user should have access:

if info.email_verified and email.split('@')[-1]=='answer.ai':

However, Google says not to do this, and to use the "hd claim" instead:

Image

We should update the example to follow Google's advice.

An analogous change will also be needed in the fasthtml explainer notebook: https://github.com/AnswerDotAI/fasthtml/blob/main/nbs/explains/oauth.ipynb

It may appear elsewhere as well.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions