Files
coder/codersdk/testdata/githubcfg.yaml
T
Steven Masley 8fefd91e4a feat!: support PKCE in the oauth2 client's auth/exchange flow (#21215)
**Breaking Change:** Existing oauth apps might now use PKCE. If an
unknown IdP type was being used, and it does not support PKCE, it will
break.

To fix, set the PKCE methods on the external auth to `none`
```
export CODER_EXTERNAL_AUTH_1_PKCE_METHODS=none
```
2025-12-15 17:41:47 +00:00

29 lines
847 B
YAML

externalAuthProviders:
- type: github
client_id: client_id
client_secret: client_secret
id: id
auth_url: https://example.com/auth
token_url: https://example.com/token
validate_url: https://example.com/validate
revoke_url: https://example.com/revoke
app_install_url: https://example.com/install
app_installations_url: https://example.com/installations
no_refresh: true
scopes:
- user:email
- read:org
extra_token_keys:
- extra
- token
device_flow: true
device_code_url: https://example.com/device
mcp_url: https://api.githubcopilot.com/mcp/
mcp_tool_allow_regex: .*
mcp_tool_deny_regex: create_gist
regex: ^https://example.com/.*$
display_name: GitHub
display_icon: /static/icons/github.svg
code_challenge_methods_supported:
- S256