LibreChat icon indicating copy to clipboard operation
LibreChat copied to clipboard

Enhancement: Restrict registration to certain domains (for small business use)

Open darkBuddha opened this issue 2 years ago • 2 comments

What features would you like to see added?

Hi, it would be great, if e-mail registration could be restricted to company domains.

More details

This prevents unauthorized users to register, and should be fairly trivial to add. Boosting business use is a good idea for any open-source project.

Which components are impacted by your request?

No response

Pictures

No response

Code of Conduct

  • [X] I agree to follow this project's Code of Conduct

darkBuddha avatar Jan 15 '24 07:01 darkBuddha

I agree it's somewhat trivial to add but why not use OpenID for this use case?

danny-avila avatar Jan 15 '24 08:01 danny-avila

Smaller companies w/o IT focus might not have proper IDM/SSO, but most have business e-mail addresses. (facing this situation currently, not sure how to solve best... domain restriction would be simple + effective)

🙏🏻

darkBuddha avatar Jan 15 '24 08:01 darkBuddha

Now implemented through the librechat.yaml config file: https://docs.librechat.ai/install/configuration/custom_config.html#registration-object-structure

danny-avila avatar Feb 05 '24 07:02 danny-avila

Thank you so much 🙏🏻

darkBuddha avatar Feb 05 '24 07:02 darkBuddha

@danny-avila users have to click on a "confirm email" link on registration, right?

https://docs.librechat.ai/install/configuration/dotenv.html#registration-and-login

darkBuddha avatar Feb 05 '24 07:02 darkBuddha

@danny-avila clients have to click on a "confirm email" link on registering, right?

https://docs.librechat.ai/install/configuration/dotenv.html#registration-and-login

There's no confirmation email sent to the users on registration

fuegovic avatar Feb 05 '24 07:02 fuegovic

Yeah there is not a lot of email service through this app, with the only exception made for password reset for the simple security that offers.

A bare-bones implementation of that would be good for a future PR but that is not yet implemented nor a priority.

Leaving this as reference of a very simple example to use as reference: https://blog.bitsrc.io/email-confirmation-with-react-257e5d9de725

danny-avila avatar Feb 05 '24 07:02 danny-avila

There's no confirmation email sent to the users on registration

That explains why there is no mention of it in the documentation.

Added https://github.com/danny-avila/LibreChat/issues/1728, so the idea doesn't get lost.

Thank you gents 🙏🏻

darkBuddha avatar Feb 05 '24 07:02 darkBuddha