Function maybeAppendDefaultGithubExternalAuthProvider

cli/server.go:2093–2137

(
	ctx context.Context,
	logger slog.Logger,
	db database.Store,
	vals *codersdk.DeploymentValues,
	mergedExplicitProviders []codersdk.ExternalAuthConfig,
)

}

func maybeAppendDefaultGithubExternalAuthProvider(
	ctx context.Context,
	logger slog.Logger,
	db database.Store,
	vals *codersdk.DeploymentValues,
	mergedExplicitProviders []codersdk.ExternalAuthConfig,
) ([]codersdk.ExternalAuthConfig, error) {
	if !vals.ExternalAuthGithubDefaultProviderEnable.Value() {
		logger.Info(ctx, "default github external auth provider suppressed",
			slog.F("reason", "disabled by configuration"),
			slog.F("flag", "external-auth-github-default-provider-enable"),
		)
		return mergedExplicitProviders, nil
	}

	if len(mergedExplicitProviders) > 0 {
		logger.Info(ctx, "default github external auth provider suppressed",
			slog.F("reason", "explicit external auth providers configured"),
			slog.F("provider_count", len(mergedExplicitProviders)),
		)
		return mergedExplicitProviders, nil
	}

	defaultEligible, err := isDeploymentEligibleForGithubDefaultProvider(ctx, db)
	if err != nil {
		return nil, err
	}
	if !defaultEligible {
		logger.Info(ctx, "default github external auth provider suppressed",
			slog.F("reason", "deployment is not eligible"),
		)
		return mergedExplicitProviders, nil
	}

	logger.Info(ctx, "injecting default github external auth provider",
		slog.F("type", codersdk.EnhancedExternalAuthProviderGitHub.String()),
		slog.F("client_id", GithubOAuth2DefaultProviderClientID),
		slog.F("device_flow", GithubOAuth2DefaultProviderDeviceFlow),
	)
	return append(mergedExplicitProviders, codersdk.ExternalAuthConfig{
		Type:       codersdk.EnhancedExternalAuthProviderGitHub.String(),
		ClientID:   GithubOAuth2DefaultProviderClientID,
		DeviceFlow: GithubOAuth2DefaultProviderDeviceFlow,
	}), nil
}

func getGithubOAuth2ConfigParams(ctx context.Context, db database.Store, vals *codersdk.DeploymentValues) (*githubOAuth2ConfigParams, error) {
	params := githubOAuth2ConfigParams{