Configure sign-in with GitLab — oauth_provider

Configure OIDC sign-in with GitLab.com or a self-managed GitLab instance. Register an OAuth application on that instance, then pass its credentials to oauth_client() with scopes = c("openid", "profile", "email").

Usage

oauth_provider_gitlab(
  base_url = "https://gitlab.com",
  name = "gitlab",
  token_auth_style = NULL
)

Arguments

base_url: GitLab instance URL, including HTTPS and any deployment subpath. Defaults to "https://gitlab.com".
name: Optional provider name (default "gitlab").
token_auth_style: Authentication style for token requests: "header" (client_secret_basic), "body" (client_secret_post), or "public" (public client; send client_id only). The alias "none" is also accepted for "public". If NULL (default), it is inferred conservatively from discovery: "header" (client_secret_basic) is preferred, followed by "body" (client_secret_post), then "public" if none is advertised and PKCE is enabled. Set token_auth_style = "public" explicitly for a public client registration. JWT methods ("client_secret_jwt", "private_key_jwt") and mTLS methods ("tls_client_auth", "self_signed_tls_client_auth") must be selected explicitly. See oauth_provider() for the supported methods and their credentials.

Value

OAuthProvider object configured for GitLab.

Details

The "openid" scope requests an ID token. API and repository access require separate GitLab scopes. See GitLab's OIDC guide.

Examples

if (FALSE) { # \dontrun{
oauth_provider_gitlab()
oauth_provider_gitlab("https://gitlab.example.edu")
} # }