Skip to content

Implement allowSignup flag for OIDC authentication provider

Administrator requested to merge allow_signup_oidc into main

Created by: rafax

This adds a allowSignup flag to OpenIDConnect auth provider - context, rfc.

This is enough to block new signups through OIDC (while still allowing existing accounts to log-in).

Testing:

Added basic unit tests.

On local instance with Sourcegraph GSuite OIDC provider verified - Loom

  • with allowSignup: false I cannot create a new account
  • with allowSignup: false I can use OIDC to authenticate to an existing account
  • with allowSignup: true I can create a new account

Merge request reports