Skip to content

Commit f900521

Browse files
committed
config: Add appOwnDomains.
These will be useful, in an upcoming commit, to grant the privilege of the native "Sign in with Apple" flow (in which sensitive `id_token`s will be sent to the server) only to domains that have trust with the mobile app. To do that securely, the base URL we'll be sending requests to (basically what the user entered on the first screen) will be checked to see if its host matches one of these.
1 parent 6a9db46 commit f900521

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

src/config.js

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -11,6 +11,7 @@ type Config = {|
1111
sentryKey: string | null,
1212
enableErrorConsoleLogging: boolean,
1313
serverDataOnStartup: string[],
14+
appOwnDomains: string[],
1415
|};
1516

1617
const config: Config = {
@@ -39,6 +40,7 @@ const config: Config = {
3940
'update_message_flags',
4041
'user_status',
4142
],
43+
appOwnDomains: ['zulip.com', 'zulipchat.com', 'chat.zulip.org'],
4244
};
4345

4446
export default config;

0 commit comments

Comments
 (0)