Summary
Completes the OAuth feature with build infrastructure and user-facing documentation:
internal/buildinfo/buildinfo.go: exports DefaultOAuthClientID and DefaultOAuthClientSecret vars injected at link time via goreleaser -ldflags from repo secrets OAUTH_CLIENT_ID/OAUTH_CLIENT_SECRET- Official binaries ship zero-config defaults; local dev builds require
--oauth-client-id
docs/oauth-login.md: dedicated guide covering PKCE/device flows, display channels, URL-elicitation security advisory, Docker fixed-port recipe, BYO-app, and GHES requirementsREADME.md and server.json updated: PAT made optional, OAuth callback port published, Docker install badges updated to use OAuth-first workflowNormalizeHost exported from internal/oauth so github.com host aliases still receive the baked-in client
Upstream reference
Fork conflict
None. internal/buildinfo is new. server.json and docs are not part of the fork's custom tools.
Context
Without baked-in credentials, every user of official binaries would need to register their own OAuth app. The ldflags injection makes the official image truly zero-config while leaving dev builds explicit.
Depends on
See parent issue (OAuth story).
Summary
Completes the OAuth feature with build infrastructure and user-facing documentation:
internal/buildinfo/buildinfo.go: exportsDefaultOAuthClientIDandDefaultOAuthClientSecretvars injected at link time via goreleaser-ldflagsfrom repo secretsOAUTH_CLIENT_ID/OAUTH_CLIENT_SECRET--oauth-client-iddocs/oauth-login.md: dedicated guide covering PKCE/device flows, display channels, URL-elicitation security advisory, Docker fixed-port recipe, BYO-app, and GHES requirementsREADME.mdandserver.jsonupdated: PAT made optional, OAuth callback port published, Docker install badges updated to use OAuth-first workflowNormalizeHostexported frominternal/oauthso github.com host aliases still receive the baked-in clientUpstream reference
Fork conflict
None.
internal/buildinfois new.server.jsonand docs are not part of the fork's custom tools.Context
Without baked-in credentials, every user of official binaries would need to register their own OAuth app. The ldflags injection makes the official image truly zero-config while leaving dev builds explicit.
Depends on
See parent issue (OAuth story).