Domain whitelisting

Domains configured in the MAGEMENT_OAUTH2_WHITELISTED_DOMAINS environment variable are automatically granted access to Alumio.

Any user matching a whitelisted domain will automatically inherit the role ROLE_ADMINISTRATOR.

The following is an example of how to configure whitelisted domains in .env.local:

MAGEMENT_OAUTH2_WHITELISTED_DOMAINS=example.com,alumio.com,subdomain.exmple.com

The example above allows, amongst others, the following users to log in with administrator privileges:

  • foo@alumio.com
  • bar@example.com
  • baz@subdomain.example..com