Allow override of automatically assigned delegated domain

token-validator/auth.go

@@ -30,6 +30,15 @@ func init() {
 }
 
 func validateAuthToken(s *adlin.Student, _ httprouter.Params, _ []byte) (interface{}, error) {
+	if s.DelegatedDomain != nil {
+		for _, ddomain := range adlin.DelegatedDomainSuffixes {
+			if strings.HasSuffix(*s.DelegatedDomain, ddomain) {
+				s.DelegatedDomain = nil
+				break
+			}
+		}
+	}
+
 	return s, nil
 }