From b60b6ffc3f93b4d9a4c6869d1305258a1d844164 Mon Sep 17 00:00:00 2001
From: Dominion <Cyberboss@users.noreply.github.com>
Date: Wed, 5 Apr 2023 00:16:26 -0400
Subject: [PATCH] @MrStonedOne MitM requested changes.

---
 README.md                                                    | 1 +
 build/Version.props                                          | 2 +-
 .../Configuration/OAuthConfiguration.cs                      | 5 +++++
 .../Security/OAuth/GenericOAuthValidator.cs                  | 4 +++-
 4 files changed, 10 insertions(+), 2 deletions(-)

diff --git a/README.md b/README.md
index c314551797..2f9ca09eb9 100644
--- a/README.md
+++ b/README.md
@@ -173,6 +173,7 @@ Security:
       ClientSecret: "..."
       RedirectUrl: "..."
       ServerUrl: "..."
+	  UserInformationUrlOverride: "..." # For power users, leave out of configuration for most cases. Not supported by GitHub provider.
 ```
 The following providers use the `RedirectUrl` setting:
 
diff --git a/build/Version.props b/build/Version.props
index 8802116119..cbf5f2169e 100644
--- a/build/Version.props
+++ b/build/Version.props
@@ -4,7 +4,7 @@
   <Import Project="ControlPanelVersion.props" />
   <PropertyGroup>
     <TgsCoreVersion>5.7.3</TgsCoreVersion>
-    <TgsConfigVersion>4.4.0</TgsConfigVersion>
+    <TgsConfigVersion>4.5.0</TgsConfigVersion>
     <TgsApiVersion>9.9.0</TgsApiVersion>
     <TgsApiLibraryVersion>10.3.0</TgsApiLibraryVersion>
     <TgsClientVersion>11.3.0</TgsClientVersion>
diff --git a/src/Tgstation.Server.Host/Configuration/OAuthConfiguration.cs b/src/Tgstation.Server.Host/Configuration/OAuthConfiguration.cs
index 47c47d5083..1818a15d8b 100644
--- a/src/Tgstation.Server.Host/Configuration/OAuthConfiguration.cs
+++ b/src/Tgstation.Server.Host/Configuration/OAuthConfiguration.cs
@@ -16,5 +16,10 @@ namespace Tgstation.Server.Host.Configuration
 		/// The authentication server URL. Not used by all providers.
 		/// </summary>
 		public Uri RedirectUrl { get; set; }
+
+		/// <summary>
+		/// User information URL override. Not supported by the <see cref="Api.Models.OAuthProvider.GitHub"/> provider.
+		/// </summary>
+		public Uri UserInformationUrlOverride { get; set; }
 	}
 }
diff --git a/src/Tgstation.Server.Host/Security/OAuth/GenericOAuthValidator.cs b/src/Tgstation.Server.Host/Security/OAuth/GenericOAuthValidator.cs
index 8eac45f2ad..f1cccb7437 100644
--- a/src/Tgstation.Server.Host/Security/OAuth/GenericOAuthValidator.cs
+++ b/src/Tgstation.Server.Host/Security/OAuth/GenericOAuthValidator.cs
@@ -121,7 +121,9 @@ namespace Tgstation.Server.Host.Security.OAuth
 				}
 
 				Logger.LogTrace("Getting user details...");
-				using var userInformationRequest = new HttpRequestMessage(HttpMethod.Get, UserInformationUrl);
+
+				var userInfoUrl = OAuthConfiguration?.UserInformationUrlOverride ?? UserInformationUrl;
+				using var userInformationRequest = new HttpRequestMessage(HttpMethod.Get, userInfoUrl);
 				userInformationRequest.Headers.Authorization = new AuthenticationHeaderValue(
 					ApiHeaders.BearerAuthenticationScheme,
 					accessToken);