When configuring your GitHub App for Coder, use these exact callback URLs:
https://coderdemo.io/api/v2/users/oauth2/github/callback
https://coderdemo.io/api/v2/external-auth/primary-github/callback
-
Request user authorization (OAuth) during installation: ✅ MUST be checked
- This allows users to log into Coder with their GitHub identity
-
Permissions Required:
- Account permissions:
- Email addresses: Read-only
- Repository permissions:
- Contents: Read and write
- Metadata: Read-only (auto-required)
- Pull requests: Read and write (optional, for PR creation)
- Issues: Read and write (optional, for issue management)
- Account permissions:
-
Installation:
- Install the app to your account/organization
- Grant access to "All repositories" or specific repos
- Cause: Callback URLs don't match what Coder is sending
- Solution: Verify the URLs above are exactly correct (including
/api/v2/users/and/api/v2/)
- Cause: Accessing
http://coderdemo.ioinstead ofhttps://coderdemo.io - Solution: Always use
https://when accessing Coder
Once configured, users can:
- Log into Coder using GitHub authentication
- Clone repositories in their workspaces
- Push/pull code
- Create pull requests (if permissions granted)