Cyberia Auth Management
04 / Security
Domains & Origin Trust
Authentication only happens from domains you trust.
In this feature
- Explicit allowed origins registered per application
- Environment-derived origins added automatically
- Organization domain ownership verified via DNS TXT challenge
- Domain modes such as manual invitation or auto-join
- One-click re-verification when DNS changes
// In the console
What it looks like
Pin allowed origins per application and verify organization domains by DNS TXT record, so tokens can never be exercised from an attacker-controlled page.
Domains & Origin Trust
Threat model
Origin pinning by default
Every auth request is checked against the application's allowed origins. A phishing clone hosted elsewhere cannot complete a flow even with a leaked public key.
Ownership
DNS-proven domains
Claiming a domain requires publishing a challenge TXT record. Once verified, the domain can drive automatic tenant membership or restrict invitations to corporate addresses.
Operations
Local and preview environments
Localhost and environment URLs are registered automatically so development never requires disabling security to get work done.
Included out of the box
Explicit allowed origins registered per application
Environment-derived origins added automatically
Organization domain ownership verified via DNS TXT challenge
Domain modes such as manual invitation or auto-join
One-click re-verification when DNS changes