Team & platformGuide

Ways to sign in

Every account can sign in with its e-mail and password. On waiso.dev you can also Continue with Google or Continue with GitHub, and companies can route their people to their own identity provider (single sign-on).

4 min readOpen in Waiso
What you will learn
  • Create an account or sign in with GitHub
  • Connect GitHub to an account you already have
  • Offer GitHub sign-in on a self-hosted install

The doors into an account

The sign-in page always offers your e-mail and password. Under it, when this site offers them, come Continue with Google and Continue with GitHub. Each of them reaches the same account once it is connected, and each one asks for your two-step code afterwards if you turned two-step sign-in on.

waisoSign inorContinue with GoogleContinue with GitHub
The sign-in page: e-mail and password first, then Google and GitHub.
  • Password. Forgot it? Forgot password? sends a link that works once, for an hour, and signs you out everywhere. Change it any time in Settings → Profile.
  • Google and GitHub. Create an account in one step, or connect one to the account you already have.
  • Company sign-in. If your company set up single sign-on, typing your work e-mail shows Continue with and its name — see the single sign-on guide.

GitHub sign-in

On the sign-in or sign-up page press Continue with GitHub and approve. A new e-mail address gets a new account. Waiso reads only who you are and your verified primary e-mail — it never acts on GitHub for you.

What Waiso reads from GitHub

Only your GitHub account number, your login, your name, your avatar and your primary verified e-mail. Waiso does not read your repositories, does not keep a GitHub token and cannot act on GitHub in your name. Changing your e-mail on GitHub later does not change your Waiso account: the connection is to the GitHub account itself, not to an address.

Connect GitHub to your account

  1. Open Connected accounts

    Settings → Profile, card Connected accounts.

  2. Connect

    Press Connect on the GitHub row and approve at GitHub. From then on either door reaches the same account.

Disconnect removes it. It is refused when GitHub is your only way in — set a password first.

On a self-hosted install

GitHub sign-in appears only when the install has its own GitHub OAuth app. Create one in GitHub (Settings → Developer settings → OAuth Apps) with the callback https://<your address>/api/users/auth/github/callback, then add to the install’s .env and restart:

Shell.env
GITHUB_CLIENT_ID=...
GITHUB_CLIENT_SECRET=...
  • Without ALLOW_SIGNUP=true, GitHub signs in only people who connected it — it does not create accounts.
  • If the only admin lost both their phone and their recovery codes, the operator of the server can remove their two-step sign-in: docker compose exec api waiso-api --reset-2fa admin@example.com. There is no web page for this on purpose.

Related topics