feat: add support for login with github

Author: raghavyuva

.env.sample

@@ -35,6 +35,11 @@ SECRET_MANAGER_SECRET_PATH=/
 INFISICAL_URL=https://app.infisical.com
 INFISICAL_TOKEN=
 
+# GitHub OAuth (social login via GitHub App)
+# Uses the same Client ID/Secret from your GitHub App settings
+GITHUB_APP_CLIENT_ID=
+GITHUB_APP_CLIENT_SECRET=
+
 # Cloudflare Turnstile (CAPTCHA)
 # Get keys at https://dash.cloudflare.com/turnstile
 # For local dev, use test key: 1x0000000000000000000000000000000AA (always passes)

src/auth/index.ts

@@ -40,6 +40,16 @@ export const auth = betterAuth({
       await emailService.sendResetPassword({ email: user.email, url, token });
     },
   },
+  ...(config.githubClientId && config.githubClientSecret
+    ? {
+        socialProviders: {
+          github: {
+            clientId: config.githubClientId,
+            clientSecret: config.githubClientSecret,
+          },
+        },
+      }
+    : {}),
   advanced: {
     database: {
       generateId: 'uuid',

src/config.ts

@@ -65,6 +65,10 @@ export const config = {
   // Passkey (WebAuthn) configuration
   passkeyRpId: process.env.PASSKEY_RP_ID || new URL(process.env.AUTH_SERVICE_URL || 'http://localhost').hostname,
 
+  // GitHub OAuth (social login via GitHub App)
+  githubClientId: process.env.GITHUB_APP_CLIENT_ID || '',
+  githubClientSecret: process.env.GITHUB_APP_CLIENT_SECRET || '',
+
   // SSH configuration (for installer-generated SSH keys)
   sshHost: process.env.SSH_HOST || '',
   sshPort: parseInt(process.env.SSH_PORT || '22', 10),