feat: Add user defined domain validation

[eugenio-oddone]

Relates to #226

Adds support for an optional function to validate a token's domain when allowedDomains functionality does not suffice.

[github-actions]

No linked issues found. Please add the corresponding issues in the pull request description.
Use GitHub automation to close the issue when a PR is merged

[simoneb]

@CyanoFresh can you check if this would solve your issue?

[CyanoFresh]

@CyanoFresh can you check if this would solve your issue?

yes!
upd: but still strange for me that allowedDomains is not checking domains, but the whole issuer string. Maybe it is better to rename to something like issuersWhitelist in next major release

[simoneb]

@CyanoFresh can you check if this would solve your issue?

yes! upd: but still strange for me that allowedDomains is not checking domains, but the whole issuer string. Maybe it is better to rename to something like issuersWhitelist in next major release

I agree, this is probably a leftover from the former implementation which was exclusively auth0.

@eugenio-oddone can you create an issue to track this request?

[eugenio-oddone]

@CyanoFresh can you check if this would solve your issue?

yes! upd: but still strange for me that allowedDomains is not checking domains, but the whole issuer string. Maybe it is better to rename to something like issuersWhitelist in next major release

I agree, this is probably a leftover from the former implementation which was exclusively auth0.

@eugenio-oddone can you create an issue to track this request?

Yes will do 👍