Enable Domain and Email Whitelist for Google Oauth

[arkrwn]

SOCIAL_AUTH_GOOGLE_OAUTH2_WHITELISTED_DOMAINS

Thus all who have an email with domain that is whitelist will be able to log in and only limited to active and thus not will be redirected to login page

SOCIAL_AUTH_GOOGLE_OAUTH2_WHITELISTED_EMAILS

Thus all who have an email that is whitelist will be able to log in and only limited to active and thus not will be redirected to login page

SOCIAL_AUTH_LOGIN_ERROR_URL

Set redirection to some path if the user got rejected

SOCIAL_AUTH_BACKEND_ERROR_URL

Set redirection to some path if backend cannot handle the request for login

---

EXAMPLE

ONLY allow email with example.com domain to register / login :

SOCIAL_AUTH_GOOGLE_OAUTH2_WHITELISTED_DOMAINS = ['example.com']
SOCIAL_AUTH_LOGIN_ERROR_URL = '/login'
SOCIAL_AUTH_BACKEND_ERROR_URL = '/login'

ONLY allow email john.doe@example.com to register / login :

SOCIAL_AUTH_GOOGLE_OAUTH2_WHITELISTED_EMAILS = ['john.doe@example.com]
SOCIAL_AUTH_LOGIN_ERROR_URL = '/login'
SOCIAL_AUTH_BACKEND_ERROR_URL = '/login'

Note : DOMAIN and EMAILS WHITELISTED can be set for multiple values, separate the value by comma (,)

---

Note: DefectDojo is now on Python3 and Django 2.2.1 Please submit your pull requests to the 'dev' branch as the 'legacy-python2.7' branch is only for bug fixes. Any new features submitted to the legacy branch will be ignored and closed.

When submitting a pull request, please make sure you have completed the following checklist:

• Your code is flake8 compliant
• Your code is python 3.5 compliant
• If this is a new feature and not a bug fix, you've included the proper documentation in the ReadTheDocs documentation folder. https://github.com/DefectDojo/Documentation/tree/master/docs or provide feature documentation in the PR.
• Model changes must include the necessary migrations in the dojo/dd_migrations folder.
• Add applicable tests to the unit tests.

[arkrwn]

this for issue #1697 , and it's can be awesome if combine with set user.is_staff = False in **dojo/pipeline.py** so by default allowed user will set as active not staff and or admin, they need to have approval from their supervisor and or manager to raise their status to staff or admin.

[madchap]

Yep, as discussed, good with me. Actually proceeding with this.