Allowlist

In the application.yml there is a feature toggle to enable an allowlist:

feature:
  use_deny_allow_list:
    allow_enabled: True
    allow_location: "file:///opt/myconext/allowed.json"

The value of the allow_location is a JSON file with all allowed domains. An example:

[
  "strange.me",
  "noops.eu"
]

Users who want to register can only do so if the domain is allowed. Note that subdomains are also allowed. If the domain noops.eu is allowed then subdomain.noops.eu is also allowed.

The file is read om startup, so updates require a restart of myconext-server.