grist-core icon indicating copy to clipboard operation
grist-core copied to clipboard

OIDCConfig: email not verified for xxxxxxx

Open Tristan0430 opened this issue 1 year ago • 1 comments

How to solve this error: OIDCConfig: email not verified for I want to integrate OIDC application such as Casdoor, but this error holds me off and I don't have a clue…… What should I do?

Tristan0430 avatar Dec 30 '23 15:12 Tristan0430

OIDCConfig by default rejects with the message you mention accounts which don't have their email verified or if the identity provider does not tell whether that's the case.

You might set the GRIST_OIDC_SP_IGNORE_EMAIL_VERIFIED env variable to true. But I would rather recommend to configure Casdoor so it provides the emailVerified claim for production, and it looks like this can be done: https://github.com/casbin/casdoor/blob/v1.485.0/object/user.go#L200-L212

fflorent avatar Dec 30 '23 17:12 fflorent