Closed
Description
Expected Behavior
Users should not be able to sign up for new accounts on Coder if they're not a member of any of the teams specified in CODER_OAUTH2_GITHUB_ALLOWED_TEAMS
.
Current Behavior
Users were able to sign up for new accounts on our Coder instance using GitHub even though they're not members of any of the GitHub teams we specified in our CODER_OAUTH2_GITHUB_ALLOWED_TEAMS
environment variable (which we set in /etc/coder.d/coder.env
on our server).
Metadata
Metadata
Assignees
Labels
No labels