Is it possible to force GitHub authentication every time when users open code-server from a Coder workspace?

[infant-tr]

Summary: I’m trying to make code-server always require a fresh GitHub login whenever a user opens the code-server app from a Coder workspace. Code-server normally persists GitHub authentication tokens inside the user data directory, which means users only authenticate once.
I want to disable all token persistence, so the GitHub login prompt appears every time the code-server web UI is opened.

Question

Is there a Coder-supported, reliable way to ensure that:

✔ GitHub login is required on every workspace open
✔ GitHub tokens never persist
✔ Even if the workspace has a persistent PVC (/home/coder), code-server never reuses previous auth tokens

If there is an official method, I’d like to implement it in the template.
If not, is this something that could be supported in Coder or documented?

Environment

Coder version: Coder:v2.29.0

Code-server version: 4.106.3

Deployment: Kubernetes + Coder Terraform template

[code-asher]

I believe credentials are stored encrypted in the browser and there is no way to disable storing logins. It would have to be a feature request but I am not sure we want to maintain that in code-server, we try to generally only patch usability issues.

[code-asher]

If you are interested in maintaining a patch like that yourself (or doing some sed magic), I think it could be done here: https://github.com/microsoft/vscode/blob/ac4cbdf48759c7d8c3eb91ffe6bb04316e263c57/src/vs/code/browser/workbench/workbench.ts#L619-L621

I think if this is undefined then no secrets will be stored.

[code-asher]

Hmm actually the comment says it will fall back to storing on the remote, so maybe not. More investigation would be required.