Remove GitLab issuer configuration

Author: initstring

.env.example-dev

@@ -24,7 +24,6 @@ AUTH_TRUST_HOST=true
 #GITHUB_CLIENT_SECRET=
 #GITLAB_CLIENT_ID=
 #GITLAB_CLIENT_SECRET=
-#GITLAB_ISSUER=
 #KEYCLOAK_CLIENT_ID=
 #KEYCLOAK_CLIENT_SECRET=
 #KEYCLOAK_ISSUER=

deploy/docker/.env.example-prod

@@ -19,7 +19,6 @@ ENABLE_DEMO_MODE=false
 #GITHUB_CLIENT_SECRET=
 #GITLAB_CLIENT_ID=
 #GITLAB_CLIENT_SECRET=
-#GITLAB_ISSUER=
 #KEYCLOAK_CLIENT_ID=
 #KEYCLOAK_CLIENT_SECRET=
 #KEYCLOAK_ISSUER=

docs/installation.md

@@ -28,7 +28,7 @@ Minimum values to edit:
 
 RTAP supports SSO or a demo login button. Supported SSO providers today are Google, GitHub, GitLab, Keycloak, and Okta. If you need another provider, open an issue and we can add it.
 
-- **SSO (recommended):** configure your provider's details (client ID/secret, plus issuer for Keycloak/Okta/GitLab self-managed) using the variable names provided in the .env file.
+- **SSO (recommended):** configure your provider's details (client ID/secret, plus issuer for Keycloak/Okta) using the variable names provided in the .env file.
 - **Demo mode:** set `ENABLE_DEMO_MODE=true`. This exposes a “Sign in as Demo Admin” button and **anyone with access to the sign-in page can log in without an account**. Use only for isolated testing or demos.
 
 For any SSO provider, configure the following in your identity provider console:

src/env.ts

@@ -31,7 +31,6 @@ export const env = createEnv({
     // Optional: GitLab OAuth client credentials (registers provider when present)
     GITLAB_CLIENT_ID: z.string().optional(),
     GITLAB_CLIENT_SECRET: z.string().optional(),
-    GITLAB_ISSUER: z.string().optional(),
     // Optional: Keycloak OAuth client credentials (registers provider when present)
     KEYCLOAK_CLIENT_ID: z.string().optional(),
     KEYCLOAK_CLIENT_SECRET: z.string().optional(),
@@ -68,7 +67,6 @@ export const env = createEnv({
     GITHUB_CLIENT_SECRET: process.env.GITHUB_CLIENT_SECRET,
     GITLAB_CLIENT_ID: process.env.GITLAB_CLIENT_ID,
     GITLAB_CLIENT_SECRET: process.env.GITLAB_CLIENT_SECRET,
-    GITLAB_ISSUER: process.env.GITLAB_ISSUER,
     KEYCLOAK_CLIENT_ID: process.env.KEYCLOAK_CLIENT_ID,
     KEYCLOAK_CLIENT_SECRET: process.env.KEYCLOAK_CLIENT_SECRET,
     KEYCLOAK_ISSUER: process.env.KEYCLOAK_ISSUER,

src/server/auth/config.ts

@@ -221,7 +221,6 @@ export const authConfig = {
           GitLabProvider({
             clientId: process.env.GITLAB_CLIENT_ID,
             clientSecret: process.env.GITLAB_CLIENT_SECRET,
-            issuer: process.env.GITLAB_ISSUER,
             allowDangerousEmailAccountLinking: true,
           }),
         ]