Function getGithubOAuth2ConfigParams

cli/server.go:2139–2179

(ctx context.Context, db database.Store, vals *codersdk.DeploymentValues)

}

func getGithubOAuth2ConfigParams(ctx context.Context, db database.Store, vals *codersdk.DeploymentValues) (*githubOAuth2ConfigParams, error) {
	params := githubOAuth2ConfigParams{
		accessURL:         vals.AccessURL.Value(),
		clientID:          vals.OAuth2.Github.ClientID.String(),
		clientSecret:      vals.OAuth2.Github.ClientSecret.String(),
		deviceFlow:        vals.OAuth2.Github.DeviceFlow.Value(),
		allowSignups:      vals.OAuth2.Github.AllowSignups.Value(),
		allowEveryone:     vals.OAuth2.Github.AllowEveryone.Value(),
		allowOrgs:         vals.OAuth2.Github.AllowedOrgs.Value(),
		rawTeams:          vals.OAuth2.Github.AllowedTeams.Value(),
		enterpriseBaseURL: vals.OAuth2.Github.EnterpriseBaseURL.String(),
	}

	// If the user manually configured the GitHub OAuth2 provider,
	// we won't add the default configuration.
	if params.clientID != "" || params.clientSecret != "" || params.enterpriseBaseURL != "" {
		return &params, nil
	}

	// Check if the user manually disabled the default GitHub OAuth2 provider.
	if !vals.OAuth2.Github.DefaultProviderEnable.Value() {
		return nil, nil //nolint:nilnil
	}

	defaultEligible, err := isDeploymentEligibleForGithubDefaultProvider(ctx, db)
	if err != nil {
		return nil, err
	}

	if !defaultEligible {
		return nil, nil //nolint:nilnil
	}

	params.clientID = GithubOAuth2DefaultProviderClientID
	params.deviceFlow = GithubOAuth2DefaultProviderDeviceFlow
	if len(params.allowOrgs) == 0 {
		params.allowEveryone = GithubOAuth2DefaultProviderAllowEveryone
	}

	return &params, nil
}

func configureGithubOAuth2(instrument *promoauth.Factory, params *githubOAuth2ConfigParams) (*coderd.GithubOAuth2Config, error) {
	redirectURL, err := params.accessURL.Parse("/api/v2/users/oauth2/github/callback")