Implements OpenID domain filtering
Adds ability to only allow email addresses under specific domains to
be used for OpenID login.
The allowed domains can be configured in etc/gerrit.config under
section [auth] as "openIdDomain". The values are then stored across
GerritConfig and AuthConfig. If at least one openIdDomain is
configured, OpenIdServiceImpl checks for a match on the email
address used for login and returns error otherwise.
The need for this was described in Google Groups to limit OpenID to
Google Apps domain(s) of a company when using Gerrit for internal
development.
Change-Id: I549059e7ecea827009b632ef2e38d2ccdddf7cfb
3 files changed
