You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Google supports a parameter called hd on their authorization URL, which allows the login UI to be restricted to a specific Google Workspace instance. This can be useful when developing internal applications for companies, nonprofits or academic institutions.
It is not possible currently to use this parameter with Lucia. My proposal is to add an optional hostedDomain attribute to Config in packages/oauth/src/providers/google.ts:
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
-
Google supports a parameter called
hd
on their authorization URL, which allows the login UI to be restricted to a specific Google Workspace instance. This can be useful when developing internal applications for companies, nonprofits or academic institutions.It is not possible currently to use this parameter with Lucia. My proposal is to add an optional
hostedDomain
attribute toConfig
inpackages/oauth/src/providers/google.ts
:type Config = { clientId: string; clientSecret: string; redirectUri: string; scope?: string[]; accessType?: "online" | "offline"; + hostedDomain?: string; };
Other similar librairies such as Passport or The PHP League’s OAuth 2 client have support for this attribute.
I’d love to contribute a pull request to implement this.
Beta Was this translation helpful? Give feedback.
All reactions