!!!!! Very Important Security bug

[Przemek]

I have that app on my vpn server and everyone who login with github account can enter my panel and change my wireguard configs.
Regards

[vx3r]

this is how oauth2 oidc works, not sure there is a way to limit users

[Malik Al]

So it's become public server?

[Przemek]

@malikshi Yes, every one who Has github account can login on my panel.

[Malik Al]

Bad news to Low spec vps and limited bw.

[Przemek]

Yes, I use nginx-proxy, but I don't think it's true that @vx3r says:

this is how oauth2 oidc works, not sure there is a way to limit users

There has to be way to secure that. That will be useless.
regards.

[vx3r]

i suggest using nginx basic auth or a oauth server you control (self hosted gitlab for example)