authentik: only allow valid email domains; block t-online hosted email domains #46

Open
Marcel wants to merge 1 commit from block-t-online into main
Owner

@t-online.de (blocked mx, i also tested a custom domain using t-online)
image
@example.org (no mx)
image
@noreply.elbforge.org (null mx)
image

Domain with a valid MX also still works.

`@t-online.de` (blocked mx, i also tested a custom domain using t-online) ![image](/attachments/93b2950a-7e52-47f3-ac67-b9e3bbe07850) `@example.org` (no mx) ![image](/attachments/8a5a4236-28f9-4e08-9e85-06851b92ff59) `@noreply.elbforge.org` (null mx) ![image](/attachments/ccae0ede-01a3-4d4c-9816-a5f089b5dace) Domain with a valid MX also still works.
@ -0,0 +47,4 @@
for exchange in exchanges:
if exchange.endswith(".t-online.de"):
ak_message("Email addresses from this provider are not accepted.")
Owner

We should add a reason (link?) for that. Not (only), because we want people to migrate to another email provider, but to be transparent about that decision. Otherwise, it sounds like "we don't like them".

We should add a reason (link?) for that. Not (only), because we want people to migrate to another email provider, but to be transparent about that decision. Otherwise, it sounds like "we don't like them".

also emails FROM that provider are accepted, the message could be more "honest", we would accept them, but that provider doesn't accept our emails^^

"Signing up with a email from this provider is not possible due to them not accepting our emails" maybe 🤷

i spent way too long searching for something about this topic and came up empty handed. maybe lets use the link @m4rc3l posted earlier.

also emails FROM that provider are accepted, the message could be more "honest", we would accept them, but that provider doesn't accept our emails^^ "Signing up with a email from this provider is not possible due to them not accepting our emails" maybe 🤷 i spent way too long searching for something about this topic and came up empty handed. maybe lets use the link @m4rc3l posted earlier.
This pull request can be merged automatically.
This branch is out-of-date with the base branch
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin block-t-online:block-t-online
git switch block-t-online

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main
git merge --no-ff block-t-online
git switch block-t-online
git rebase main
git switch main
git merge --ff-only block-t-online
git switch block-t-online
git rebase main
git switch main
git merge --no-ff block-t-online
git switch main
git merge --squash block-t-online
git switch main
git merge --ff-only block-t-online
git switch main
git merge block-t-online
git push origin main
Sign in to join this conversation.
No reviewers
No milestone
No project
No assignees
3 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
elbforge/elf-infra!46
No description provided.