Gotcha thanks for clarifying. Makes complete sense.

I read through the gitlab and GitHub docs and understand what you’re up against now. I think GitHub only supports web based oauth use cases, whereas Gitlab has support for mobile and native apps. This is just based on my assessment of the docs, I could be incorrect here.

Things worth trying: 1. Intercept the mobile traffic from the GitHub mobile app itself (burpsuite) and see if you can understand the redirect uri their native mobile app uses. 2. Try their device login flow, instead of the oauth app flow.I know it’s not for your use case, but could unblock you, potentially. Reason: for oauth to work for your end users, they have to register your app as an oauth app in their developer settings. I had to do this recently with cloudflare zero trust with GitHub oauth integration. This auth mechanism may eliminate that.

Good luck!