I have currently set up a web-based application, to which I have added an authentication method using oauth2_proxy (with gitlab as authentication provider). What I need to know is if there's way that I can restrict the access to this app using a Gitlab group or something like that? Because as of now - oauth is configured to allow access to any user on gitlab which has a @foor.bar email domain (-email-domain=foo.bar directive on oauth config). However I'm looking to control this method in a more restricted manner, so for instance I will create a group on Gitlab, to which I will add only relevant users & other groups to which access should be granted. Is there a way to do it?
Asked
Active
Viewed 822 times
6
Moshe Vayner
- 738
- 1
- 8
- 23
-
Have you found a solution? – manu Jan 23 '19 at 16:32
-
I'm afraid not, ended up not using it. Although it's been almost two years since I posted that question so who knows, it might be supported now :-) – Moshe Vayner Jan 24 '19 at 21:36
1 Answers
1
Not sure if it's what you're looking for but regards documentation you could use --authenticated-emails-file param to provide authenticated emails list.
amon3k
- 26
- 2
-
Thanks! That seems like a relatively newer addition since I posted this question (4 and something years ago) and have abandoned that project a while ago, but thanks for posting that answer for others that may come across this requirement! – Moshe Vayner Oct 06 '21 at 18:18