GitLab

Members sign in with their GitLab account, in the system browser.

Before you start

Console	GitLab applications
Endpoint group	Social Login
Email	Returned, but not verified — cannot match an existing account
Signs in	In the browser

Create the application

1. Open your GitLab profile’s Applications page.

   On a self-managed GitLab the same page is under your profile settings there.

2. Add a new application and name it what members should see.

3. Set the Redirect URI to the address from Memberside → API Keys → Social Login → GitLab, which looks like https://yoursite.com/wp-json/memberside/v1/social/callback/gitlab.

4. Leave Confidential ticked. The secret stays on your server.

5. Tick only the read_user scope.

6. Save, then copy the Application ID and Secret. GitLab shows the secret once.

Do not tick the api scope

The api scope grants read and write access to every project the member can reach. Signing someone in needs their name and address, which is what read_user gives. A community site holding a token with api scope is a much larger problem than a sign-in button is worth.

Why the email cannot match an existing account

GitLab does not assert that the address it returns has been verified. Memberside therefore refuses to attach a GitLab sign-in to an account that already exists by matching the address.

New members can still register through GitLab. Existing members should sign in first and link GitLab from Social Connects.

What to paste into Memberside

Under Memberside → API Keys → Social Login → GitLab:

Field	Value
Client ID	The Application ID
Client secret	The Secret

When it does not work

Symptom	Cause	Fix
“The redirect URI included is not valid”	The address does not match the registered one	Copy it again
Sign-in succeeds but no profile comes back	The read_user scope was not ticked	Tick it and save
A second account is created for an existing member	GitLab’s email is unverified, so matching is refused	Have them sign in first, then link
Self-managed GitLab is refused	The application was created on gitlab.com	Create it on your own instance