openid "installed" provider signup only? #3143

New Issue

GiteaMirror · 2025-11-02T05:01:54-06:00

GiteaMirror commented

2025-11-02 05:01:54 -06:00

Originally created by @schmitch on GitHub (Apr 5, 2019).

currently I have created an OAuth2 application via the admin, however I know need to enable

[openid]
ENABLE_OPENID_SIGNIN = true
ENABLE_OPENID_SIGNUP = true

to allow self registration?
however wouldn't that expose my gitea instance to anybody that can provide a openid signup?

is there any way to actually configure gitea to only allow self registration for predefined openid / oauth2 providers?

Originally created by @schmitch on GitHub (Apr 5, 2019). currently I have created an OAuth2 application via the admin, however I know need to enable ``` [openid] ENABLE_OPENID_SIGNIN = true ENABLE_OPENID_SIGNUP = true ``` to allow self registration? however wouldn't that expose my gitea instance to anybody that can provide a openid signup? is there any way to actually configure gitea to only allow self registration for predefined openid / oauth2 providers?

GiteaMirror closed this issue

2025-11-02 05:01:54 -06:00

GiteaMirror commented

2025-11-02 05:01:55 -06:00

@Jean-Baptiste-Lasselle commented on GitHub (Nov 13, 2019):

currently I have created an OAuth2 application via the admin, however I know need to enable
[openid]
ENABLE_OPENID_SIGNIN = true
ENABLE_OPENID_SIGNUP = true
to allow self registration?
however wouldn't that expose my gitea instance to anybody that can provide a openid signup?

is there any way to actually configure gitea to only allow self registration for predefined openid / oauth2 providers?

Hi @schmitch You closed the issue, yet : did you manage to spawn the configuration you desired ? (auto-registering OIDC auth allowed, but from limited providers ? )

@Jean-Baptiste-Lasselle commented on GitHub (Nov 13, 2019): > currently I have created an OAuth2 application via the admin, however I know need to enable > > ``` > [openid] > ENABLE_OPENID_SIGNIN = true > ENABLE_OPENID_SIGNUP = true > ``` > > to allow self registration? > however wouldn't that expose my gitea instance to anybody that can provide a openid signup? > > is there any way to actually configure gitea to only allow self registration for predefined openid / oauth2 providers? Hi @schmitch You closed the issue, yet : did you manage to spawn the configuration you desired ? (auto-registering OIDC auth allowed, but from limited providers ? )

GiteaMirror referenced this issue

2025-11-02 12:19:14 -06:00

[PR #3143] [MERGED] Fix avatar URLs (#3069) #16793

Sign in to join this conversation.

Branches Tags

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/gitea#3143