move domain allowlist to Auth0 action #657
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Description of the change
We already had an action that was mostly overlapping with our deprecated hook, so this just adds the missing piece of denying access to signups that don't hit the domain mapping. (The diff is a little misleading, because the domain-mapping solution was already what was live in Auth0; all I did was add the deny call at the end and move recidiviz email domains into the mapping instead of handling them separately.) While in there I reorganized the files a bit to better reflect the Auth0 resources they represent.
All of these changes are already live in staging and the hook has been deleted. You can see evidence of this working in the Auth0 logs: expected success, expected failure
Type of change
Related issues
Checklists
Development
These boxes should be checked by the submitter prior to merging:
Code review
These boxes should be checked by reviewers prior to merging: