Type of Change

• Bugfix
• New feature
• Enhancement
• Refactoring
• Dependency updates
• Documentation
• CI/CD

Description

There will be a mapping of email domain and auth methods.
This PR will restrict users to enter into the dashboard based on the email domain.

Additional Changes

• This PR modifies the API contract
• This PR modifies the database schema
• This PR modifies application configuration/environment variables

Motivation and Context

Closes #6939.

How did you test it?

1. Create user auth method with email domain

   curl --location 'http://localhost:8080/user/auth' \
   --header 'Authorization: Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ1c2VyX2lkIjoiMjAxYTJlZWQtNGE0ZC00MjZlLTg1N2ItMjNhM2ZjZTk5NTMzIiwibWVyY2hhbnRfaWQiOiJtZXJjaGFudF8xNjk3NjIzMjI0Iiwicm9sZV9pZCI6Im1lcmNoYW50X2FkbWluIiwiZXhwIjoxNjk3Nzk2MDI3LCJvcmdfaWQiOiJvcmdfVzJ2NmtPZ2lMSWx3YnFoaVh4VUIifQ.HnkHHWboPt82-VlvE5GVCjTJ1sA82-dMbUxeYNl-mxk' \
   --header 'Content-Type: application/json' \
   --header 'api-key: ••••••' \
   --data '{
       "owner_id": "test",
       "owner_type": "organization",
       "auth_method": {
           "auth_type": "password",
           "private_config": {
               "base_url": "url",
               "client_id": "client_id",
               "client_secret": "client_secret"
           },
           "public_config": {
               "name": "okta"
           }
       },
       "allow_signup": true,
       "email_domain": "gmail.com" 
   }'

   Response will be 200 OK.

2. Update user auth method

   1. Auth Method

      curl --location --request PUT 'http://localhost:8080/user/auth' \
      --header 'Content-Type: application/json' \
      --header 'api-key: test_admin' \
      --header 'Cookie: Cookie_1=value' \
      --data '{
          "auth_method": {
              "id": "799596e6-e6ba-405c-b5cf-70fd510409dc",
              "auth_method": {
                  "auth_type": "open_id_connect",
                  "private_config": {
                      "base_url": "base url",
                      "client_id": "client id",
                      "client_secret": "client secret"
                  },
                  "public_config": {
                      "name": "okta"
                  }
              }
          }
      }
      '

      Response will be 200 OK.
   2. Email Domain

       curl --location --request PUT 'http://localhost:8080/user/auth' \
       --header 'Content-Type: application/json' \
       --header 'api-key: test_admin' \
       --header 'Cookie: Cookie_1=value' \
       --data '{
           "email_domain": {
               "owner_id": "test",
               "email_domain": "juspay.com"
           }
       }'

      Response will be 200 OK.

All the following APIs will restrict the users based on the email domain and the corresponding auth method

1. Signin - Password
2. Signup - Password
3. Connect Account - MagicLink
4. Forgot Password - Password
5. Send Verification Email - MagicLink
6. SSO Signin - OpenIdConnect
7. Terminate Auth Select - Selected auth method

If the auth method list for email domain is empty of consists of the above auth method, the request will be continued, or else the api will be stopped.

Checklist

• I formatted the code cargo +nightly fmt --all
• I addressed lints thrown by cargo clippy
• I reviewed the submitted code
• I added unit tests for my changes where possible