🚀 Feature: Map allowed groups to applications

[luketainton]

Feature description

Applications should have a list of allowed groups, i.e. groups of users that are allowed to use this application.

Pitch

This allows better control over which users can use which applications.

Example:
I'd like to be able to add a user to group "X" and then tell Pocket ID that for a user to be allowed access to an application, they must be in group "X". If the user signs into the app and they are in group "X" then it works as it does today. If they are not, Pocket ID should disallow authentication.

[stonith404]

Isn't that something that the client should handle? For example Pingvin Share or Nextcloud allow you to specify which groups can access the service.

[simono41]

Isn't that something that the client should handle? For example Pingvin Share or Nextcloud allow you to specify which groups can access the service.

I also think, it could also be set at grafana that only certain groups have access to the dashboards.

But would be a cool feature if the pocket id could also regulate itself, e.g. such an exclude or include option which services can be used with the account and which cannot.

[luketainton]

Isn't that something that the client should handle? For example Pingvin Share or Nextcloud allow you to specify which groups can access the service.

In an ideal world yes each client would handle this themselves, but unfortunately there are plenty of applications out there that don't. Some examples:

• GlitchTip
• Gatus (you can tell it specific users to allow but not groups)
• Stirling PDF

[stonith404]

Okay, I see.

While I personally wouldn’t use this feature and believe that handling group-based access is more appropriately managed by the client, I’ll keep an eye on the interest level. If this feature request gets more likes (👍), I’ll consider implementing it.

Of course I'm also open for a pull request.