(chore): Allow SSO from root domains

Core/Pro/Domain.php

@@ -71,6 +71,16 @@ class Domain
         return !$settings || ((string) $settings->getUserGuid() === $userGuid);
     }
 
+    /**
+     * @param string $domain
+     * @return bool
+     */
+    public function isRoot(string $domain): bool
+    {
+        $rootDomains = $this->config->get('pro')['root_domains'] ?? [];
+        return in_array(strtolower($domain), $rootDomains, true);
+    }
+
     /**
      * @param Settings $settings
      * @param User|null $owner

Core/SSO/Delegates/ProDelegate.php

@@ -26,6 +26,7 @@ class ProDelegate
 
     public function isAllowed($domain)
     {
-        return (bool) $this->proDomain->lookup($domain);
+        return $this->proDomain->isRoot($domain)
+           || (bool) $this->proDomain->lookup($domain);
     }
 }

Spec/Core/Pro/DomainSpec.php

@@ -173,6 +173,23 @@ class DomainSpec extends ObjectBehavior
             ->shouldReturn(false);
     }
 
+    public function it_should_check_if_root_domain()
+    {
+        $this->config->get('pro')
+            ->shouldBeCalled()
+            ->willReturn([
+                'root_domains' => ['phpspec.test']
+            ]);
+
+        $this
+            ->isRoot('phpspec.test')
+            ->shouldReturn(true);
+
+        $this
+            ->isRoot('not-a-root-phpspec.test')
+            ->shouldReturn(false);
+    }
+
     public function it_should_get_icon(
         Settings $settings,
         User $owner