[go: up one dir, main page]

Skip to content

Prevent admin Workspaces OAuth app misconfigurations

Everyone can contribute. Help move this issue forward while earning points, leveling up and collecting rewards.

MR: Pending

Description

In Add endpoint to get Workspaces HTTP Server conf... (#545064 - closed) , we introduced a new GitLab instance wide OAuth application for Workspaces. This OAuth application can technically be modified by the instance administrators. We want to present a warning when they do modify it; on similar lines as Prevent admin Web IDE OAuth app misconfigurations (!157093 - merged) . This will ensure admins are aware of the risks of modifying the configuration for the OAuth application.

Acceptance criteria

  • A warning banner is displayed if anyone tries to modify the Workspaces OAuth application
  • All new code and logic should be namespaced under the remote_development bounded context / namespace.

Implementation plan

The implementation of this should be virtually identical to the OAuth app behavior for the Web IDE.

It shouldn't be necessary to DRY up the logic between the two implementations, it's only two instances of it.

Edited by 🤖 GitLab Bot 🤖