Skip to content

Commit 41c0d02

Browse files
committed
feat: add tip for disabling user-password authentication when using oauth
1 parent d343327 commit 41c0d02

3 files changed

Lines changed: 12 additions & 0 deletions

File tree

docs/guides/github-app-oauth.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -64,4 +64,8 @@ tinyauth:
6464
OAuth doesn't mean security, with the current setup everybody with a Github account can login to Tinyauth as a normal user. If you would like to limit which users can login with OAuth, you can add the `OAUTH_WHITELIST` environment variable and allow only your email address to login. For more information check [here](../reference/configuration.md)
6565
:::
6666

67+
::: tip
68+
Since you have OAuth enabled, you can now remove the `USERS` or `USERS_FILE` environment variables so as you can login only with your OAuth provider.
69+
:::
70+
6771
And we are done! After you restart your docker container and go to the tinyauth login screen, you should have an additional option to login with Github.

docs/guides/github-oauth.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -60,4 +60,8 @@ tinyauth:
6060
OAuth doesn't mean security, with the current setup everybody with a Github account can login to tinyauth as a normal user. If you would like to limit which users can login with OAuth, you can add the `OAUTH_WHITELIST` environment variable and allow only your email address to login. For more information check [here](../reference/configuration.md)
6161
:::
6262

63+
::: tip
64+
Since you have OAuth enabled, you can now remove the `USERS` or `USERS_FILE` environment variables so as you can login only with your OAuth provider.
65+
:::
66+
6367
And we are done! After you restart your docker container and go to the tinyauth login screen, you should have an additional option to login with Github.

docs/guides/google-oauth.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -80,4 +80,8 @@ tinyauth:
8080
OAuth doesn't mean security, with the current setup everybody with a Google account can login to tinyauth as a normal user. If you would like to limit which users can login with OAuth, you can add the `OAUTH_WHITELIST` environment variable and allow only your email address to login. For more information check [here](../reference/configuration.md)
8181
:::
8282

83+
::: tip
84+
Since you have OAuth enabled, you can now remove the `USERS` or `USERS_FILE` environment variables so as you can login only with your OAuth provider.
85+
:::
86+
8387
And we are done! After you restart your docker container and go to the tinyauth login screen, you should have an additional option to login with Google.

0 commit comments

Comments
 (0)