restrict accepted logins by GitHub organization

[RyanGannon]

Is it possible to restrict accepted logins by GitHub organization? That is, instead of restricting by email address domain or just allowing anyone on GitHub access to my site, can I set Vouch to only allow members of a specified GitHub organization to access my site?

I feel I'm missing something simple.

[bnfinet]

To the best of my understanding, no it is not possible.

If GitHub provided any Oauth Claim in their token which indicated organizational status it should be possible to use Openresty to fiiter users, but I don't believe they do
https://github.com/vouch/vouch-proxy#advanced-authorization-using-openresty

GitHub team membership is a separate api call
https://developer.github.com/v3/orgs/members/#check-membership

It's possible this api call could be added to the auth/userinfo logic but it would require some thought. We don't have anything like that in the code base at this point.

[RyanGannon]

Thank you. This answers my question.

[bnfinet]

@RyanGannon FYI - @eikehartmann has submitted a PR which supports GitHub orgs and teams

If you were in a position to help test it would be much appreciated :)