fix: block creating oidc users when oidc has not been configured

ethanndickson · ethanndickson · commit 663a3baddf07 · 2024-07-31T12:12:58.000Z
diff --git a/coderd/users.go b/coderd/users.go
@@ -465,12 +465,19 @@ func (api *API) postUser(rw http.ResponseWriter, r *http.Request) {
 		loginType = database.LoginTypePassword
 	case codersdk.LoginTypeOIDC:
 		loginType = database.LoginTypeOIDC
+		if api.OIDCConfig == nil {
+			httpapi.Write(ctx, rw, http.StatusBadRequest, codersdk.Response{
+				Message: "You must configure OIDC before creating OIDC users.",
+			})
+			return
+		}
 	case codersdk.LoginTypeGithub:
 		loginType = database.LoginTypeGithub
 	default:
 		httpapi.Write(ctx, rw, http.StatusBadRequest, codersdk.Response{
 			Message: fmt.Sprintf("Unsupported login type %q for manually creating new users.", req.UserLoginType),
 		})
+		return
 	}
 
 	user, _, err := api.CreateUser(ctx, api.Database, CreateUserRequest{
