feat: Add ability to enforce SSO

Closes #543, closes #545
2025-12-17 17:23:25 +03:00 · 2024-02-01 00:31:15 +01:00
parent a1fd694248
commit b8d262f745
10 changed files with 80 additions and 46 deletions
--- a/server/api/controllers/access-tokens/create.js
+++ b/server/api/controllers/access-tokens/create.js
@@ -46,8 +46,11 @@ module.exports = {
  },

  async fn(inputs) {
-    const remoteAddress = getRemoteAddress(this.req);
+    if (sails.config.custom.oidcEnforced) {
+      throw Errors.USE_SINGLE_SIGN_ON;
+    }

+    const remoteAddress = getRemoteAddress(this.req);
    const user = await sails.helpers.users.getOneByEmailOrUsername(inputs.emailOrUsername);

    if (!user) {