Improve SSO
Opened this issue · 0 comments
cjcenizal commented
Per suggestion from @aamirbutt we could try using https://support.google.com/cloud/answer/6158849#authorized-domains&zippy=%2Cauthorized-domains, but I think that doesn't actually block API access.
I think we'll need to implement an allowlist in the .env and config files that's consumed on the front-end and back-end, instead.