@agentconnect.md/setup 2.11.0-rc.13 → 2.11.0-rc.18

package/README.md

@@ -36,8 +36,10 @@ An organization that signs in through its own identity provider can choose
 **Enterprise SSO (OIDC or SAML)** instead of a social provider. Setup first asks
 Logto to create the connector and shows the redirect URI (OIDC) or the ACS URL
 and SP entity ID (SAML) to register with the identity provider; the provider's
-issuer and client, or its SAML metadata, come next. An identity provider on a
-private network also needs its address in `LOGTO_SSRF_ALLOWED_ADDRESSES`.
+issuer and client, or its SAML metadata, come next, together with at least one
+email domain: Logto offers no sign-in through a connector without one. An
+identity provider on a private network also needs its address in
+`LOGTO_SSRF_ALLOWED_ADDRESSES`.
 
 ## Run from source
 

package/dist/index.js

@@ -62846,7 +62846,7 @@ const LogtoSsoConnectorSchema = strictObject({
 	protocol: _enum(["oidc", "saml"]),
 	/** Shown on the console's sign-in button. */
 	name: string().trim().min(1).max(64),
-	/** Email domains Logto routes to this connector on its own sign-in page. */
+	/** Email domains Logto routes to this connector; Logto offers the connector only once it has one. */
 	domains: array(SsoDomainSchema).default([]),
 	/** OIDC IdP; the client secret is the write-only 'logto.ssoConnectorClientSecret'. */
 	oidc: strictObject({
@@ -62983,6 +62983,15 @@ const DeploymentConfigValuesV1Schema = strictObject({
 			],
 			message: "set exactly one of metadataUrl and metadata"
 		});
+		if ((sso.oidc || sso.saml) && sso.domains.length === 0) ctx.addIssue({
+			code: "custom",
+			path: [
+				"logto",
+				"ssoConnector",
+				"domains"
+			],
+			message: "needs at least one email domain once the identity provider is set"
+		});
 	}
 	if (values.auth.mode === "oidc") {
 		if (values.auth.socialProviders.length === 0 && values.auth.sso === null) ctx.addIssue({
@@ -67252,7 +67261,7 @@ const ssoForm = (prefix) => String.raw`
               <label class="field">Or IdP metadata XML<textarea id="${prefix}-metadata" rows="4"></textarea></label>
               <label class="field">Email attribute<input id="${prefix}-email-attribute" autocomplete="off" placeholder="email"></label>
             </div>
-            <label class="field">Email domains, comma-separated<input id="${prefix}-domains" autocomplete="off" placeholder="example.com"></label>
+            <label class="field">Email domains (at least one), comma-separated<input id="${prefix}-domains" autocomplete="off" placeholder="example.com" required></label>
             <div class="row"><button id="${prefix}-submit">Save SSO and configure Logto</button></div>
           </div>`;
 const SETUP_HTML = String.raw(_templateObject || (_templateObject = _taggedTemplateLiteral([