in play-v30/src/main/scala/com/gu/googleauth/auth.scala [222:225]
private def checkDomains(domains: List[String], claims: JwtClaims): Unit =
if (domains.nonEmpty && !domains.exists(claims.email.split("@").lastOption.contains)) {
throw new GoogleAuthException("Configured Google domain does not match")
}