darkhelm/notifications-admin
1
0
Fork 0
mirror of https://github.com/GSA/notifications-admin.git synced 2026-08-23 15:57:23 -04:00
Code Issues Packages Projects Releases Wiki Activity

add check for government email addresses

Browse Source
This commit is contained in:
Kenneth Kehl
2024-05-13 13:39:51 -07:00
parent b5c7a71215
commit d47f9933d2
3 changed files with 70 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
app/main/views/register.py
View File

@@ -146,6 +146,26 @@ def check_invited_user_email_address_matches_expected(
debug_msg("invited user email did not match expected email, abort(403)")
flash("You cannot accept an invite for another person.")
abort(403)
check_for_gov_email_address(user_email)
def check_for_gov_email_address(user_email):
# We could try to check that it is a government email at the time the invite is
# sent, but due to the way login.gov allows multiple emails, it would not be effective.
# We track the login.gov user by their uuid, so if they have a login.gov account
# with a .gov email address and a .com email address, the .com address will work without
# having a check here.
if (
user_email.lower().endswith(".gov")
or user_email.lower().endswith(".mil")
or user_email.lower().endswith(".si.edu")
):
# everything is good, proceed
pass
else:
debug_msg("invited user has a non-government email address.")
flash("You must use a government email address.")
abort(403)
@main.route("/set-up-your-profile", methods=["GET", "POST"])