Giters

auth0-samples / auth0-multitenant-website

Sample that demonstrates a simple multi-tenant web application that uses the Authorization extension to manage tenants with groups

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Perform tenant authorization checks on all protected endpoints

twistedstream opened this issue · comments

commented

Currently the authorization check to ensure a user has access to the tenant they are browsing to only occurs on the /callback endpoint. This check needs to happen on other endpoints as well (except for maybe /login and /logout) to prevent users from accessing data from tenants that are not a member of.