feat: added support for limiting email domains

frontend/src/hooks/api/oidcConfig/mutations.tsx

@@ -13,11 +13,13 @@ export const useUpdateOIDCConfig = () => {
       jwksUri,
       tokenEndpoint,
       userinfoEndpoint,
+      allowedEmailDomains,
       clientId,
       clientSecret,
       isActive,
       orgSlug
     }: {
+      allowedEmailDomains?: string;
       issuer?: string;
       authorizationEndpoint?: string;
       jwksUri?: string;
@@ -30,6 +32,7 @@ export const useUpdateOIDCConfig = () => {
     }) => {
       const { data } = await apiRequest.patch("/api/v1/sso/oidc/config", {
         issuer,
+        allowedEmailDomains,
         authorizationEndpoint,
         jwksUri,
         tokenEndpoint,
@@ -54,6 +57,7 @@ export const useCreateOIDCConfig = () => {
     mutationFn: async ({
       issuer,
       authorizationEndpoint,
+      allowedEmailDomains,
       jwksUri,
       tokenEndpoint,
       userinfoEndpoint,
@@ -71,10 +75,12 @@ export const useCreateOIDCConfig = () => {
       clientSecret: string;
       isActive: boolean;
       orgSlug: string;
+      allowedEmailDomains?: string;
     }) => {
       const { data } = await apiRequest.post("/api/v1/sso/oidc/config", {
         issuer,
         authorizationEndpoint,
+        allowedEmailDomains,
         jwksUri,
         tokenEndpoint,
         userinfoEndpoint,

frontend/src/hooks/api/oidcConfig/types.ts

@@ -9,4 +9,5 @@ export type OIDCConfigData = {
   orgId: string;
   clientId: string;
   clientSecret: string;
+  allowedEmailDomains?: string;
 };

frontend/src/views/Settings/OrgSettingsPage/components/OrgAuthTab/OIDCModal.tsx

@@ -23,7 +23,8 @@ const schema = z.object({
   tokenEndpoint: z.string().min(1),
   userinfoEndpoint: z.string().min(1),
   clientId: z.string().min(1),
-  clientSecret: z.string().min(1)
+  clientSecret: z.string().min(1),
+  allowedEmailDomains: z.string().optional()
 });
 
 export type OIDCFormData = z.infer<typeof schema>;
@@ -48,12 +49,14 @@ export const OIDCModal = ({ popUp, handlePopUpClose, handlePopUpToggle }: Props)
       setValue("userinfoEndpoint", data.userinfoEndpoint);
       setValue("clientId", data.clientId);
       setValue("clientSecret", data.clientSecret);
+      setValue("allowedEmailDomains", data.allowedEmailDomains);
     }
   }, [data]);
 
   const onOIDCModalSubmit = async ({
     issuer,
     authorizationEndpoint,
+    allowedEmailDomains,
     jwksUri,
     tokenEndpoint,
     userinfoEndpoint,
@@ -67,6 +70,7 @@ export const OIDCModal = ({ popUp, handlePopUpClose, handlePopUpToggle }: Props)
         await createMutateAsync({
           issuer,
           authorizationEndpoint,
+          allowedEmailDomains,
           jwksUri,
           tokenEndpoint,
           userinfoEndpoint,
@@ -79,6 +83,7 @@ export const OIDCModal = ({ popUp, handlePopUpClose, handlePopUpToggle }: Props)
         await updateMutateAsync({
           issuer,
           authorizationEndpoint,
+          allowedEmailDomains,
           jwksUri,
           tokenEndpoint,
           userinfoEndpoint,
@@ -187,6 +192,19 @@ export const OIDCModal = ({ popUp, handlePopUpClose, handlePopUpToggle }: Props)
               </FormControl>
             )}
           />
+          <Controller
+            control={control}
+            name="allowedEmailDomains"
+            render={({ field, fieldState: { error } }) => (
+              <FormControl
+                label="Allowed Email Domains (defaults to any)"
+                errorText={error?.message}
+                isError={Boolean(error)}
+              >
+                <Input {...field} placeholder="infisical.com, google.com" autoComplete="off" />
+              </FormControl>
+            )}
+          />
           <Controller
             control={control}
             name="clientId"