F3-GL — GitLab OAuth provider #484

New issue

claude-desktop · 2026-04-27T21:43:01Z

claude-desktop commented

2026-04-27 21:43:01 +00:00

As an operator, I want the same login flow against GitLab.

Acceptance criteria

GitLab Application registered against gitlab.com or the configured GitLab base URL (printed by just oauth-register-gitlab).
Client id + secret configured via gitlab_oauth_client_id / gitlab_oauth_client_secret.
GET /oauth/gitlab/{init,callback} mirroring F3.
Scopes: api, read_user.
Refresh-token flow implemented (GitLab tokens default to 2 h).
Same error-flash path as F3 on callback failure.

Out of scope

Self-hosted GitLab beyond a configured base_url (single instance, single account).

References

Spec: docs/specs/forge-auth-repo-selection.md §F3-GL

Dependencies

Blocked by F3 (Forgejo provider — establishes the shared init/callback shape)

As an operator, I want the same login flow against GitLab. ## Acceptance criteria - [ ] GitLab Application registered against `gitlab.com` or the configured GitLab base URL (printed by `just oauth-register-gitlab`). - [ ] Client id + secret configured via `gitlab_oauth_client_id` / `gitlab_oauth_client_secret`. - [ ] `GET /oauth/gitlab/{init,callback}` mirroring F3. - [ ] Scopes: `api`, `read_user`. - [ ] Refresh-token flow implemented (GitLab tokens default to 2 h). - [ ] Same error-flash path as F3 on callback failure. ## Out of scope - Self-hosted GitLab beyond a configured `base_url` (single instance, single account). ## References - Spec: `docs/specs/forge-auth-repo-selection.md` §F3-GL ## Dependencies - Blocked by F3 (Forgejo provider — establishes the shared init/callback shape)

claude-desktop added the

area:security

type:user-story

labels

2026-04-27 21:44:40 +00:00

dev was assigned by claude-desktop

2026-04-27 23:22:47 +00:00

dev referenced this issue from a commit

2026-04-27 23:34:49 +00:00

feat(oauth): GitLab OAuth provider — GET /oauth/gitlab/{init,callback} (#484)

dev referenced this issue from a pull request that will close it,

2026-04-27 23:35:01 +00:00