feat: limit oidc domains (#263)

2025-12-02 00:51:08 +05:00
parent bb8f3de0ad
commit 915877b8e6
6 changed files with 37 additions and 2 deletions
--- a/.env.example
+++ b/.env.example
@@ -43,6 +43,8 @@ TRELLO_APP_SECRET=

 # OAuth providers (optional)
 BETTER_AUTH_TRUSTED_ORIGINS=
+# Optional: Restrict OIDC/Social sign-ins to specific email domains (comma-separated)
+BETTER_AUTH_ALLOWED_DOMAINS=
 GOOGLE_CLIENT_ID=
 GOOGLE_CLIENT_SECRET=
 DISCORD_CLIENT_ID=
@@ -80,4 +82,3 @@ TWITCH_CLIENT_SECRET=
 APPLE_CLIENT_ID=
 APPLE_CLIENT_SECRET=
 APPLE_APP_BUNDLE_IDENTIFIER=
-