Auth0 email domain whitelisting and profile enrichment

auth0-whitelisting-profile-enrichment-rule.js

function (user, context, callback) {
  if (!user.email_verified) {
    return callback(
      new UnauthorizedError('Your email address hasn\'t been verified.'));
  }
  
  var domainWhitelist = ['auth0.com', 'example.org'];
  var domainMatch = _.find(domainWhitelist,
    function(domain) {
      var emailSplit = user.email.split('@');
      return emailSplit[emailSplit.length - 1].toLowerCase() === domain;
    }
  );

  if (!domainMatch) {
    return callback(
      new UnauthorizedError('You are not allowed to access this application.'));
  }

  if (domainMatch === 'auth0.com') {
    user.groups = user.groups || [];
    if (user.groups.indexOf('Administrators') < 0) {
     user.groups.push('Administrators'); 
    }
  }
  
  return callback(null, user, context);
}