on the passwordless recipe, i noticed that ST alll...
# support-questions-legacyk
kelchy2714
09/08/2022, 4:01 AMon the passwordless recipe, i noticed that ST alllowed anyone who can verify the otp. is there a way to limit logins to only known email addresses?
r
rp_st
09/08/2022, 4:01 AMHey! Yes there is.
rp_st
09/08/2022, 4:02 AMYou can override the createCode api on the backend to check that the u out email is whitelisted
k
kelchy2714
09/08/2022, 4:04 AMsounds interesting, you have a link to the doc which describes this?
r
rp_st
09/08/2022, 4:06 AMCheckout the advanced customisation > APIs override section