Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Appearance settings
Discussion options

Summary: I’m trying to make code-server always require a fresh GitHub login whenever a user opens the code-server app from a Coder workspace. Code-server normally persists GitHub authentication tokens inside the user data directory, which means users only authenticate once.
I want to disable all token persistence, so the GitHub login prompt appears every time the code-server web UI is opened.

Question

Is there a Coder-supported, reliable way to ensure that:

✔ GitHub login is required on every workspace open
✔ GitHub tokens never persist
✔ Even if the workspace has a persistent PVC (/home/coder), code-server never reuses previous auth tokens

If there is an official method, I’d like to implement it in the template.
If not, is this something that could be supported in Coder or documented?

Environment

Coder version: Coder:v2.29.0

Code-server version: 4.106.3

Deployment: Kubernetes + Coder Terraform template

You must be logged in to vote

Replies: 1 comment · 2 replies

Comment options

I believe credentials are stored encrypted in the browser and there is no way to disable storing logins. It would have to be a feature request but I am not sure we want to maintain that in code-server, we try to generally only patch usability issues.

You must be logged in to vote
2 replies
@code-asher
Comment options

If you are interested in maintaining a patch like that yourself (or doing some sed magic), I think it could be done here: https://github.com/microsoft/vscode/blob/ac4cbdf48759c7d8c3eb91ffe6bb04316e263c57/src/vs/code/browser/workbench/workbench.ts#L619-L621

I think if this is undefined then no secrets will be stored.

@code-asher
Comment options

Hmm actually the comment says it will fall back to storing on the remote, so maybe not. More investigation would be required.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Category
🙏
Q&A
Labels
None yet
2 participants
Morty Proxy This is a proxified and sanitized view of the page, visit original site.