Prevent signin without hosted domain

2018-05-28 22:32:36 -07:00
parent 25aa1f288b
commit aa9ed09f08
6 changed files with 25 additions and 2 deletions
--- a/server/auth/google.js
+++ b/server/auth/google.js
@ -37,6 +37,11 @@ router.get('google.callback', async ctx => {
    url: 'https://www.googleapis.com/oauth2/v1/userinfo',
  });

+  if (!profile.data.hd) {
+    ctx.redirect('/?notice=google-hd');
+    return;
+  }
+
  const teamName = capitalize(profile.data.hd.split('.')[0]);
  const [team, isFirstUser] = await Team.findOrCreate({
    where: {