feat: restrict login to specific org by id (scope) (#4294)

* feat: add new org scope

* change default of UserLoginMustBeDomain to false

* return resource owner claims

* fix: use email style for first user

* fix: ensure email style for default users (backwards compatibility)

* change to external domain (as it was before UserLoginMustBeDomain change)

* update e2e tests to use email style usernames

* document new scope

* lint e2e

Co-authored-by: Fabi <[email protected]>
This commit is contained in:
Livio Spring
2022-09-23 12:08:10 +00:00
committed by GitHub
co-authored by Fabi
parent c98170c19b
commit 7dfa1925cc
17 changed files with 114 additions and 19 deletions
+4 -1
View File
@@ -4,13 +4,16 @@ FirstInstance:
Org:
Name: ZITADEL
Human:
# in case that UserLoginMustBeDomain is false (default) and you don't overwrite the username with an email,
# it will be suffixed by the org domain (org-name + domain from config).
# for example: zitadel-admin in org ZITADEL on domain.tld -> [email protected]
UserName: zitadel-admin
FirstName: ZITADEL
LastName: Admin
NickName:
DisplayName:
Email:
Address: #autogenerated if empty. uses domain from config and prefixes admin@. for example: [email protected]
Address: #uses the username if empty
Verified: true
PreferredLanguage: en
Gender: