From 2e9e0f716bf886bf35dd0c486d2ae17cac5a5363 Mon Sep 17 00:00:00 2001
From: Paulo Castellano <paulo@castellanos.llc>
Date: Mon, 4 May 2026 18:42:25 -0300
Subject: [PATCH 1/4] feat: capture signup UTMs/IP and add GitHub OAuth login
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Persists marketing attribution and registration metadata for new users
across the three signup paths (email, Google, GitHub):

- 5 utm_* columns + registration_ip on the users table
- PreservesUtmParameters trait stores incoming utm_* query params on
  the register/redirect GET, retrieves them on the POST/callback —
  surviving the OAuth round-trip via session
- request()->ip() captured at the controller layer

Adds GitHub as a second OAuth provider:

- GitHubController mirroring the Google one (now renamed from
  SocialLoginController for symmetry)
- Settings → Authentication can connect/disconnect GitHub like Google
- Single SocialLogin.vue component replaces the per-provider buttons
  on Login/Register, rendering each enabled provider plus a single
  "or continue with" divider

UserFactory gains defaults for the new nullable columns so model
strict-mode access in tests doesn't trip.
---
 app/Actions/User/CreateUser.php               |  13 +-
 .../App/Settings/AuthenticationController.php |   3 +-
 .../Auth/Concerns/PreservesUtmParameters.php  |  48 +++
 .../Controllers/Auth/GitHubController.php     |  92 +++++
 ...ginController.php => GoogleController.php} |  19 +-
 .../Auth/RegisteredUserController.php         |  12 +-
 .../Middleware/App/HandleInertiaRequests.php  |   1 +
 app/Models/User.php                           |   7 +
 config/services.php                           |   7 +
 config/trypost.php                            |   2 +
 database/factories/UserFactory.php            |   7 +
 ..._212145_add_utm_columns_to_users_table.php |  28 ++
 ...04_212935_add_github_id_to_users_table.php |  24 ++
 ...935_add_registration_ip_to_users_table.php |  24 ++
 lang/en/auth.php                              |   3 +
 lang/es/auth.php                              |   3 +
 lang/pt-BR/auth.php                           |   3 +
 .../js/components/auth/GoogleAuthButton.vue   |  29 --
 resources/js/components/auth/SocialLogin.vue  |  38 +++
 resources/js/pages/auth/Login.vue             |   4 +-
 resources/js/pages/auth/Register.vue          |   4 +-
 .../pages/settings/profile/Authentication.vue |  13 +-
 routes/auth.php                               |  10 +-
 tests/Feature/Auth/SignupUtmTrackingTest.php  | 319 ++++++++++++++++++
 tests/Feature/GitHubAuthToggleTest.php        |  54 +++
 25 files changed, 716 insertions(+), 51 deletions(-)
 create mode 100644 app/Http/Controllers/Auth/Concerns/PreservesUtmParameters.php
 create mode 100644 app/Http/Controllers/Auth/GitHubController.php
 rename app/Http/Controllers/Auth/{SocialLoginController.php => GoogleController.php} (77%)
 create mode 100644 database/migrations/2026_05_04_212145_add_utm_columns_to_users_table.php
 create mode 100644 database/migrations/2026_05_04_212935_add_github_id_to_users_table.php
 create mode 100644 database/migrations/2026_05_04_212935_add_registration_ip_to_users_table.php
 delete mode 100644 resources/js/components/auth/GoogleAuthButton.vue
 create mode 100644 resources/js/components/auth/SocialLogin.vue
 create mode 100644 tests/Feature/Auth/SignupUtmTrackingTest.php
 create mode 100644 tests/Feature/GitHubAuthToggleTest.php

diff --git a/app/Actions/User/CreateUser.php b/app/Actions/User/CreateUser.php
index 85099135..f2b4f7e0 100644
--- a/app/Actions/User/CreateUser.php
+++ b/app/Actions/User/CreateUser.php
@@ -11,11 +11,12 @@
 class CreateUser
 {
     /**
-     * @param  array{name: string, email: string, password?: string, google_id?: string, email_verified_at?: \DateTimeInterface|null, is_invite?: bool}  $data
+     * @param  array{name: string, email: string, password?: string, google_id?: string, github_id?: string, email_verified_at?: \DateTimeInterface|null, is_invite?: bool, registration_ip?: string|null}  $data
+     * @param  array<string, string>  $utmParameters
      */
-    public static function execute(array $data): User
+    public static function execute(array $data, array $utmParameters = []): User
     {
-        return DB::transaction(function () use ($data): User {
+        return DB::transaction(function () use ($data, $utmParameters): User {
             $isInviteRegistration = data_get($data, 'is_invite', false);
 
             $account = Account::create([
@@ -23,14 +24,16 @@ public static function execute(array $data): User
                 'billing_email' => data_get($data, 'email'),
             ]);
 
-            $user = User::create([
+            $user = User::create(array_merge([
                 'name' => data_get($data, 'name'),
                 'email' => data_get($data, 'email'),
                 'password' => data_get($data, 'password'),
                 'google_id' => data_get($data, 'google_id'),
+                'github_id' => data_get($data, 'github_id'),
                 'email_verified_at' => data_get($data, 'email_verified_at', $isInviteRegistration ? now() : null),
                 'account_id' => $account->id,
-            ]);
+                'registration_ip' => data_get($data, 'registration_ip'),
+            ], $utmParameters));
 
             $account->update(['owner_id' => $user->id]);
 
diff --git a/app/Http/Controllers/App/Settings/AuthenticationController.php b/app/Http/Controllers/App/Settings/AuthenticationController.php
index b531bf4e..e093d9a4 100644
--- a/app/Http/Controllers/App/Settings/AuthenticationController.php
+++ b/app/Http/Controllers/App/Settings/AuthenticationController.php
@@ -17,7 +17,7 @@
 
 class AuthenticationController extends Controller
 {
-    private const array PROVIDERS = ['google'];
+    private const array PROVIDERS = ['google', 'github'];
 
     public function edit(Request $request): Response
     {
@@ -115,6 +115,7 @@ private function getConnectedAccounts(User $user): array
     {
         $labels = [
             'google' => 'Google',
+            'github' => 'GitHub',
         ];
 
         return collect(self::PROVIDERS)->map(fn (string $provider) => [
diff --git a/app/Http/Controllers/Auth/Concerns/PreservesUtmParameters.php b/app/Http/Controllers/Auth/Concerns/PreservesUtmParameters.php
new file mode 100644
index 00000000..90b174c4
--- /dev/null
+++ b/app/Http/Controllers/Auth/Concerns/PreservesUtmParameters.php
@@ -0,0 +1,48 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Http\Controllers\Auth\Concerns;
+
+use Illuminate\Http\Request;
+
+trait PreservesUtmParameters
+{
+    private const array UTM_KEYS = [
+        'utm_source',
+        'utm_medium',
+        'utm_campaign',
+        'utm_term',
+        'utm_content',
+    ];
+
+    /**
+     * @return array<string, string>
+     */
+    private function extractUtmParameters(Request $request): array
+    {
+        return array_filter(
+            array_map(
+                fn (string $value) => mb_substr($value, 0, 255),
+                array_filter($request->only(self::UTM_KEYS), 'is_string'),
+            ),
+        );
+    }
+
+    private function storeUtmParameters(Request $request): void
+    {
+        $utms = $this->extractUtmParameters($request);
+
+        if ($utms !== []) {
+            $request->session()->put('utm_parameters', $utms);
+        }
+    }
+
+    /**
+     * @return array<string, string>
+     */
+    private function retrieveUtmParameters(): array
+    {
+        return session()->pull('utm_parameters', []);
+    }
+}
diff --git a/app/Http/Controllers/Auth/GitHubController.php b/app/Http/Controllers/Auth/GitHubController.php
new file mode 100644
index 00000000..05be8a6b
--- /dev/null
+++ b/app/Http/Controllers/Auth/GitHubController.php
@@ -0,0 +1,92 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Http\Controllers\Auth;
+
+use App\Actions\User\CreateUser;
+use App\Http\Controllers\Auth\Concerns\PreservesUtmParameters;
+use App\Http\Controllers\Controller;
+use App\Models\User;
+use Illuminate\Auth\Events\Registered;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+use Laravel\Socialite\Facades\Socialite;
+
+class GitHubController extends Controller
+{
+    use PreservesUtmParameters;
+
+    public function redirect(Request $request): RedirectResponse
+    {
+        $this->storeUtmParameters($request);
+
+        return Socialite::driver('github')
+            ->scopes(['read:user', 'user:email'])
+            ->redirect();
+    }
+
+    public function callback(): RedirectResponse
+    {
+        try {
+            $githubUser = Socialite::driver('github')->user();
+        } catch (\Exception) {
+            return redirect()->route('login');
+        }
+
+        $user = User::where('github_id', (string) $githubUser->getId())
+            ->when($githubUser->getEmail(), fn ($query, $email) => $query->orWhere('email', $email))
+            ->first();
+
+        if ($user) {
+            return $this->loginExistingUser($user, (string) $githubUser->getId());
+        }
+
+        if (! $githubUser->getEmail()) {
+            return redirect()->route('login')->withErrors([
+                'email' => __('auth.github_email_unavailable'),
+            ]);
+        }
+
+        return $this->registerNewUser($githubUser);
+    }
+
+    private function loginExistingUser(User $user, string $githubId): RedirectResponse
+    {
+        if (! $user->github_id) {
+            $user->update(['github_id' => $githubId]);
+        }
+
+        if (! $user->hasVerifiedEmail()) {
+            $user->markEmailAsVerified();
+        }
+
+        Auth::login($user, remember: true);
+
+        $this->retrieveUtmParameters();
+
+        return redirect()->route('app.home');
+    }
+
+    private function registerNewUser(\Laravel\Socialite\Contracts\User $githubUser): RedirectResponse
+    {
+        $utmParameters = $this->retrieveUtmParameters();
+
+        $user = CreateUser::execute([
+            'name' => $githubUser->getName() ?? $githubUser->getNickname() ?? explode('@', $githubUser->getEmail())[0],
+            'email' => $githubUser->getEmail(),
+            'github_id' => (string) $githubUser->getId(),
+            'email_verified_at' => now(),
+            'registration_ip' => request()->ip(),
+        ], $utmParameters);
+
+        event(new Registered($user));
+
+        Auth::login($user, remember: true);
+
+        session()->flash('auth_provider', 'github');
+
+        return redirect()->route('register.success', $utmParameters);
+    }
+}
diff --git a/app/Http/Controllers/Auth/SocialLoginController.php b/app/Http/Controllers/Auth/GoogleController.php
similarity index 77%
rename from app/Http/Controllers/Auth/SocialLoginController.php
rename to app/Http/Controllers/Auth/GoogleController.php
index ae75291e..822b7a8e 100644
--- a/app/Http/Controllers/Auth/SocialLoginController.php
+++ b/app/Http/Controllers/Auth/GoogleController.php
@@ -5,17 +5,23 @@
 namespace App\Http\Controllers\Auth;
 
 use App\Actions\User\CreateUser;
+use App\Http\Controllers\Auth\Concerns\PreservesUtmParameters;
 use App\Http\Controllers\Controller;
 use App\Models\User;
 use Illuminate\Auth\Events\Registered;
 use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
 use Illuminate\Support\Facades\Auth;
 use Laravel\Socialite\Facades\Socialite;
 
-class SocialLoginController extends Controller
+class GoogleController extends Controller
 {
-    public function redirect(): RedirectResponse
+    use PreservesUtmParameters;
+
+    public function redirect(Request $request): RedirectResponse
     {
+        $this->storeUtmParameters($request);
+
         return Socialite::driver('google-auth')->redirect();
     }
 
@@ -50,17 +56,22 @@ private function loginExistingUser(User $user, string $googleId): RedirectRespon
 
         Auth::login($user, remember: true);
 
+        $this->retrieveUtmParameters();
+
         return redirect()->route('app.home');
     }
 
     private function registerNewUser(\Laravel\Socialite\Contracts\User $googleUser): RedirectResponse
     {
+        $utmParameters = $this->retrieveUtmParameters();
+
         $user = CreateUser::execute([
             'name' => $googleUser->getName(),
             'email' => $googleUser->getEmail(),
             'google_id' => $googleUser->getId(),
             'email_verified_at' => now(),
-        ]);
+            'registration_ip' => request()->ip(),
+        ], $utmParameters);
 
         event(new Registered($user));
 
@@ -68,6 +79,6 @@ private function registerNewUser(\Laravel\Socialite\Contracts\User $googleUser):
 
         session()->flash('auth_provider', 'google');
 
-        return redirect()->route('register.success');
+        return redirect()->route('register.success', $utmParameters);
     }
 }
diff --git a/app/Http/Controllers/Auth/RegisteredUserController.php b/app/Http/Controllers/Auth/RegisteredUserController.php
index 54c95c14..b030065a 100644
--- a/app/Http/Controllers/Auth/RegisteredUserController.php
+++ b/app/Http/Controllers/Auth/RegisteredUserController.php
@@ -5,6 +5,7 @@
 namespace App\Http\Controllers\Auth;
 
 use App\Actions\User\CreateUser;
+use App\Http\Controllers\Auth\Concerns\PreservesUtmParameters;
 use App\Http\Controllers\Controller;
 use App\Models\User;
 use App\Rules\Timezone;
@@ -18,8 +19,12 @@
 
 class RegisteredUserController extends Controller
 {
+    use PreservesUtmParameters;
+
     public function create(Request $request): Response
     {
+        $this->storeUtmParameters($request);
+
         return Inertia::render('auth/Register', [
             'email' => $request->query('email'),
             'redirect' => $request->query('redirect'),
@@ -37,13 +42,16 @@ public function store(Request $request): RedirectResponse
 
         $isInviteRegistration = str_contains($request->input('redirect', ''), '/invites/');
 
+        $utmParameters = $this->retrieveUtmParameters();
+
         $user = CreateUser::execute([
             'name' => $request->name,
             'email' => $request->email,
             'password' => $request->password,
             'timezone' => $request->input('timezone', 'UTC'),
             'is_invite' => $isInviteRegistration,
-        ]);
+            'registration_ip' => $request->ip(),
+        ], $utmParameters);
 
         event(new Registered($user));
 
@@ -57,6 +65,6 @@ public function store(Request $request): RedirectResponse
 
         session()->flash('auth_provider', 'email');
 
-        return redirect()->route('register.success');
+        return redirect()->route('register.success', $utmParameters);
     }
 }
diff --git a/app/Http/Middleware/App/HandleInertiaRequests.php b/app/Http/Middleware/App/HandleInertiaRequests.php
index f3b13785..da9300ed 100644
--- a/app/Http/Middleware/App/HandleInertiaRequests.php
+++ b/app/Http/Middleware/App/HandleInertiaRequests.php
@@ -59,6 +59,7 @@ public function share(Request $request): array
             'aiEnabled' => ! empty(config('services.gemini.api_key')) || ! empty(config('services.openai.api_key')),
             'selfHosted' => $isSelfHosted,
             'googleAuthEnabled' => config('trypost.google_auth_enabled'),
+            'githubAuthEnabled' => config('trypost.github_auth_enabled'),
             'trialDays' => config('cashier.trial_days'),
         ];
     }
diff --git a/app/Models/User.php b/app/Models/User.php
index 5b0eb8b6..dafee99d 100644
--- a/app/Models/User.php
+++ b/app/Models/User.php
@@ -32,9 +32,16 @@ class User extends Authenticatable implements MustVerifyEmail, OAuthenticatable
         'email',
         'password',
         'google_id',
+        'github_id',
         'account_id',
         'current_workspace_id',
         'email_verified_at',
+        'utm_source',
+        'utm_medium',
+        'utm_campaign',
+        'utm_term',
+        'utm_content',
+        'registration_ip',
     ];
 
     /**
diff --git a/config/services.php b/config/services.php
index d5ca4f63..af7517ce 100644
--- a/config/services.php
+++ b/config/services.php
@@ -76,6 +76,13 @@
         'redirect' => env('GOOGLE_AUTH_CALLBACK'),
     ],
 
+    // GitHub OAuth (used for login/signup)
+    'github' => [
+        'client_id' => env('GITHUB_CLIENT_ID'),
+        'client_secret' => env('GITHUB_CLIENT_SECRET'),
+        'redirect' => env('GITHUB_AUTH_CALLBACK'),
+    ],
+
     // Facebook Pages
     'facebook' => [
         'client_id' => env('FACEBOOK_CLIENT_ID'),
diff --git a/config/trypost.php b/config/trypost.php
index ea202f01..9ab2e2b9 100644
--- a/config/trypost.php
+++ b/config/trypost.php
@@ -46,6 +46,8 @@
 
     'google_auth_enabled' => env('GOOGLE_AUTH_ENABLED', false),
 
+    'github_auth_enabled' => env('GITHUB_AUTH_ENABLED', false),
+
     /*
     |--------------------------------------------------------------------------
     | Social Platforms
diff --git a/database/factories/UserFactory.php b/database/factories/UserFactory.php
index 0a435277..61edb164 100644
--- a/database/factories/UserFactory.php
+++ b/database/factories/UserFactory.php
@@ -33,12 +33,19 @@ public function definition(): array
             'email_verified_at' => now(),
             'password' => static::$password ??= Hash::make('password'),
             'google_id' => null,
+            'github_id' => null,
             'remember_token' => Str::random(10),
             'account_id' => Account::factory(),
             'current_workspace_id' => null,
             'two_factor_secret' => null,
             'two_factor_recovery_codes' => null,
             'two_factor_confirmed_at' => null,
+            'utm_source' => null,
+            'utm_medium' => null,
+            'utm_campaign' => null,
+            'utm_term' => null,
+            'utm_content' => null,
+            'registration_ip' => null,
         ];
     }
 
diff --git a/database/migrations/2026_05_04_212145_add_utm_columns_to_users_table.php b/database/migrations/2026_05_04_212145_add_utm_columns_to_users_table.php
new file mode 100644
index 00000000..7f80b90b
--- /dev/null
+++ b/database/migrations/2026_05_04_212145_add_utm_columns_to_users_table.php
@@ -0,0 +1,28 @@
+<?php
+
+declare(strict_types=1);
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        Schema::table('users', function (Blueprint $table): void {
+            $table->string('utm_source')->nullable()->after('current_workspace_id');
+            $table->string('utm_medium')->nullable()->after('utm_source');
+            $table->string('utm_campaign')->nullable()->after('utm_medium');
+            $table->string('utm_term')->nullable()->after('utm_campaign');
+            $table->string('utm_content')->nullable()->after('utm_term');
+        });
+    }
+
+    public function down(): void
+    {
+        Schema::table('users', function (Blueprint $table): void {
+            $table->dropColumn(['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content']);
+        });
+    }
+};
diff --git a/database/migrations/2026_05_04_212935_add_github_id_to_users_table.php b/database/migrations/2026_05_04_212935_add_github_id_to_users_table.php
new file mode 100644
index 00000000..49cb5eaa
--- /dev/null
+++ b/database/migrations/2026_05_04_212935_add_github_id_to_users_table.php
@@ -0,0 +1,24 @@
+<?php
+
+declare(strict_types=1);
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        Schema::table('users', function (Blueprint $table): void {
+            $table->string('github_id')->nullable()->unique()->after('google_id');
+        });
+    }
+
+    public function down(): void
+    {
+        Schema::table('users', function (Blueprint $table): void {
+            $table->dropColumn('github_id');
+        });
+    }
+};
diff --git a/database/migrations/2026_05_04_212935_add_registration_ip_to_users_table.php b/database/migrations/2026_05_04_212935_add_registration_ip_to_users_table.php
new file mode 100644
index 00000000..f1c0bbfc
--- /dev/null
+++ b/database/migrations/2026_05_04_212935_add_registration_ip_to_users_table.php
@@ -0,0 +1,24 @@
+<?php
+
+declare(strict_types=1);
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        Schema::table('users', function (Blueprint $table): void {
+            $table->ipAddress('registration_ip')->nullable()->after('utm_content');
+        });
+    }
+
+    public function down(): void
+    {
+        Schema::table('users', function (Blueprint $table): void {
+            $table->dropColumn('registration_ip');
+        });
+    }
+};
diff --git a/lang/en/auth.php b/lang/en/auth.php
index ec66618b..9662c88d 100644
--- a/lang/en/auth.php
+++ b/lang/en/auth.php
@@ -54,6 +54,9 @@
     'or_continue_with' => 'Or continue with',
     'google_login' => 'Log in with Google',
     'google_signup' => 'Sign up with Google',
+    'github_login' => 'Log in with GitHub',
+    'github_signup' => 'Sign up with GitHub',
+    'github_email_unavailable' => 'Unable to retrieve your email from GitHub. Make your GitHub email public or grant the email scope, then try again.',
 
     'signup_success' => [
         'page_title' => 'Welcome',
diff --git a/lang/es/auth.php b/lang/es/auth.php
index 7c947049..383fb2ba 100644
--- a/lang/es/auth.php
+++ b/lang/es/auth.php
@@ -42,6 +42,9 @@
     'or_continue_with' => 'O continuar con',
     'google_login' => 'Iniciar sesión con Google',
     'google_signup' => 'Registrarse con Google',
+    'github_login' => 'Iniciar sesión con GitHub',
+    'github_signup' => 'Registrarse con GitHub',
+    'github_email_unavailable' => 'No fue posible obtener tu correo de GitHub. Haz tu correo público en GitHub o concede el permiso de correo y vuelve a intentar.',
 
     'signup_success' => [
         'page_title' => 'Bienvenido',
diff --git a/lang/pt-BR/auth.php b/lang/pt-BR/auth.php
index 1bc72741..192cbe0b 100644
--- a/lang/pt-BR/auth.php
+++ b/lang/pt-BR/auth.php
@@ -54,6 +54,9 @@
     'or_continue_with' => 'Ou continue com',
     'google_login' => 'Entrar com Google',
     'google_signup' => 'Cadastrar com Google',
+    'github_login' => 'Entrar com GitHub',
+    'github_signup' => 'Cadastrar com GitHub',
+    'github_email_unavailable' => 'Não foi possível obter seu e-mail do GitHub. Torne seu e-mail público ou conceda a permissão de e-mail e tente novamente.',
 
     'signup_success' => [
         'page_title' => 'Bem-vindo',
diff --git a/resources/js/components/auth/GoogleAuthButton.vue b/resources/js/components/auth/GoogleAuthButton.vue
deleted file mode 100644
index 6fa14435..00000000
--- a/resources/js/components/auth/GoogleAuthButton.vue
+++ /dev/null
@@ -1,29 +0,0 @@
-<script setup lang="ts">
-import { usePage } from '@inertiajs/vue3';
-import { computed } from 'vue';
-
-import { Button } from '@/components/ui/button';
-import { redirect as googleRedirect } from '@/routes/auth/google';
-
-defineProps<{
-    label: string;
-}>();
-
-const page = usePage();
-const isEnabled = computed(() => page.props.googleAuthEnabled);
-</script>
-
-<template>
-    <template v-if="isEnabled">
-        <Button variant="outline" class="w-full" as="a" :href="googleRedirect.url()">
-            <img src="/images/social/google.svg" alt="Google" class="size-4" />
-            {{ label }}
-        </Button>
-
-        <div
-            class="relative text-center text-sm after:absolute after:inset-0 after:top-1/2 after:z-0 after:flex after:items-center after:border-t after:border-border"
-        >
-            <span class="relative z-10 bg-background px-2 text-muted-foreground">{{ $t('auth.or_continue_with') }}</span>
-        </div>
-    </template>
-</template>
diff --git a/resources/js/components/auth/SocialLogin.vue b/resources/js/components/auth/SocialLogin.vue
new file mode 100644
index 00000000..bb8a8f6f
--- /dev/null
+++ b/resources/js/components/auth/SocialLogin.vue
@@ -0,0 +1,38 @@
+<script setup lang="ts">
+import { usePage } from '@inertiajs/vue3';
+import { IconBrandGithub } from '@tabler/icons-vue';
+import { computed } from 'vue';
+
+import { Button } from '@/components/ui/button';
+import { redirect as githubRedirect } from '@/routes/auth/github';
+import { redirect as googleRedirect } from '@/routes/auth/google';
+
+defineProps<{
+    mode: 'login' | 'signup';
+}>();
+
+const page = usePage();
+const googleEnabled = computed(() => Boolean(page.props.googleAuthEnabled));
+const githubEnabled = computed(() => Boolean(page.props.githubAuthEnabled));
+const hasSocial = computed(() => googleEnabled.value || githubEnabled.value);
+</script>
+
+<template>
+    <template v-if="hasSocial">
+        <Button v-if="googleEnabled" variant="outline" class="w-full" as="a" :href="googleRedirect.url()">
+            <img src="/images/social/google.svg" alt="Google" class="size-4" />
+            {{ mode === 'login' ? $t('auth.google_login') : $t('auth.google_signup') }}
+        </Button>
+
+        <Button v-if="githubEnabled" variant="outline" class="w-full" as="a" :href="githubRedirect.url()">
+            <IconBrandGithub class="size-4" />
+            {{ mode === 'login' ? $t('auth.github_login') : $t('auth.github_signup') }}
+        </Button>
+
+        <div
+            class="relative text-center text-sm after:absolute after:inset-0 after:top-1/2 after:z-0 after:flex after:items-center after:border-t after:border-border"
+        >
+            <span class="relative z-10 bg-background px-2 text-muted-foreground">{{ $t('auth.or_continue_with') }}</span>
+        </div>
+    </template>
+</template>
diff --git a/resources/js/pages/auth/Login.vue b/resources/js/pages/auth/Login.vue
index cc3f0f9e..6a3376f7 100644
--- a/resources/js/pages/auth/Login.vue
+++ b/resources/js/pages/auth/Login.vue
@@ -1,7 +1,7 @@
 <script setup lang="ts">
 import { Form, Head } from '@inertiajs/vue3';
 
-import GoogleAuthButton from '@/components/auth/GoogleAuthButton.vue';
+import SocialLogin from '@/components/auth/SocialLogin.vue';
 import InputError from '@/components/InputError.vue';
 import TextLink from '@/components/TextLink.vue';
 import { Button } from '@/components/ui/button';
@@ -31,7 +31,7 @@ defineProps<{
         </div>
 
         <div class="flex flex-col gap-6">
-            <GoogleAuthButton :label="$t('auth.google_login')" />
+            <SocialLogin mode="login" />
 
             <Form v-bind="store.form()" :reset-on-success="['password']" v-slot="{ errors, processing }"
                 class="flex flex-col gap-6">
diff --git a/resources/js/pages/auth/Register.vue b/resources/js/pages/auth/Register.vue
index c1c2b9e9..9dbb1880 100644
--- a/resources/js/pages/auth/Register.vue
+++ b/resources/js/pages/auth/Register.vue
@@ -3,7 +3,7 @@ import { Form, Head } from '@inertiajs/vue3';
 import { IconEye, IconEyeOff } from '@tabler/icons-vue';
 import { ref } from 'vue';
 
-import GoogleAuthButton from '@/components/auth/GoogleAuthButton.vue';
+import SocialLogin from '@/components/auth/SocialLogin.vue';
 import InputError from '@/components/InputError.vue';
 import TextLink from '@/components/TextLink.vue';
 import { Button } from '@/components/ui/button';
@@ -39,7 +39,7 @@ const timezone = Intl.DateTimeFormat().resolvedOptions().timeZone;
         <Head :title="$t('auth.register.page_title')" />
 
         <div class="flex flex-col gap-6">
-            <GoogleAuthButton :label="$t('auth.google_signup')" />
+            <SocialLogin mode="signup" />
 
             <Form
                 v-bind="store.form()"
diff --git a/resources/js/pages/settings/profile/Authentication.vue b/resources/js/pages/settings/profile/Authentication.vue
index 4e3d88ad..f42a7ac6 100644
--- a/resources/js/pages/settings/profile/Authentication.vue
+++ b/resources/js/pages/settings/profile/Authentication.vue
@@ -1,6 +1,6 @@
 <script setup lang="ts">
 import { Form, Head, Link } from '@inertiajs/vue3';
-import { IconDeviceDesktop, IconDeviceMobile } from '@tabler/icons-vue';
+import { IconBrandGithub, IconDeviceDesktop, IconDeviceMobile } from '@tabler/icons-vue';
 import { trans } from 'laravel-vue-i18n';
 import { computed, ref } from 'vue';
 
@@ -29,6 +29,7 @@ import { settings as settingsHub } from '@/routes/app';
 import { edit as editAuthentication } from '@/routes/app/authentication';
 import { preferences as notificationPreferences } from '@/routes/app/notifications';
 import { edit as editProfile } from '@/routes/app/profile';
+import { redirect as githubRedirect } from '@/routes/auth/github';
 import { redirect as googleRedirect } from '@/routes/auth/google';
 import type { BreadcrumbItem } from '@/types';
 
@@ -41,7 +42,7 @@ type Session = {
 };
 
 type ConnectedAccount = {
-    provider: 'google';
+    provider: 'google' | 'github';
     label: string;
     connected: boolean;
     can_disconnect: boolean;
@@ -67,6 +68,7 @@ const tabs = computed(() => [
 
 const providerRedirects: Record<ConnectedAccount['provider'], () => { url: string }> = {
     google: googleRedirect,
+    github: githubRedirect,
 };
 
 const passwordHeading = computed(() =>
@@ -296,10 +298,15 @@ const logoutDialogOpen = ref(false);
                         >
                             <div class="flex size-10 flex-shrink-0 items-center justify-center rounded-full bg-muted">
                                 <img
-                                    :src="`/images/social/${account.provider}.svg`"
+                                    v-if="account.provider === 'google'"
+                                    src="/images/social/google.svg"
                                     :alt="account.label"
                                     class="size-5"
                                 />
+                                <IconBrandGithub
+                                    v-else-if="account.provider === 'github'"
+                                    class="size-5"
+                                />
                             </div>
                             <div class="flex-1 space-y-0.5">
                                 <div class="text-sm font-medium">{{ account.label }}</div>
diff --git a/routes/auth.php b/routes/auth.php
index 798ec5e8..1b79eb45 100644
--- a/routes/auth.php
+++ b/routes/auth.php
@@ -6,11 +6,12 @@
 use App\Http\Controllers\Auth\AuthenticatedSessionController;
 use App\Http\Controllers\Auth\EmailVerificationNotificationController;
 use App\Http\Controllers\Auth\EmailVerificationPromptController;
+use App\Http\Controllers\Auth\GitHubController;
+use App\Http\Controllers\Auth\GoogleController;
 use App\Http\Controllers\Auth\NewPasswordController;
 use App\Http\Controllers\Auth\PasswordResetLinkController;
 use App\Http\Controllers\Auth\RegisteredUserController;
 use App\Http\Controllers\Auth\SignupSuccessController;
-use App\Http\Controllers\Auth\SocialLoginController;
 use App\Http\Controllers\Auth\VerifyEmailController;
 use Illuminate\Support\Facades\Route;
 
@@ -29,8 +30,11 @@
     Route::get('/reset-password/{token}', [NewPasswordController::class, 'create'])->name('password.reset');
     Route::post('/reset-password', [NewPasswordController::class, 'store'])->name('password.store');
 
-    Route::get('/auth/google/redirect', [SocialLoginController::class, 'redirect'])->name('auth.google.redirect');
-    Route::get('/auth/google/callback', [SocialLoginController::class, 'callback'])->name('auth.google.callback');
+    Route::get('/auth/google/redirect', [GoogleController::class, 'redirect'])->name('auth.google.redirect');
+    Route::get('/auth/google/callback', [GoogleController::class, 'callback'])->name('auth.google.callback');
+
+    Route::get('/auth/github/redirect', [GitHubController::class, 'redirect'])->name('auth.github.redirect');
+    Route::get('/auth/github/callback', [GitHubController::class, 'callback'])->name('auth.github.callback');
 });
 
 Route::middleware(['auth'])->group(function () {
diff --git a/tests/Feature/Auth/SignupUtmTrackingTest.php b/tests/Feature/Auth/SignupUtmTrackingTest.php
new file mode 100644
index 00000000..ab346071
--- /dev/null
+++ b/tests/Feature/Auth/SignupUtmTrackingTest.php
@@ -0,0 +1,319 @@
+<?php
+
+declare(strict_types=1);
+
+use App\Models\User;
+use Laravel\Socialite\Facades\Socialite;
+use Laravel\Socialite\Two\User as SocialiteUser;
+
+test('email registration saves utm parameters from the register page query string', function () {
+    $utms = [
+        'utm_source' => 'peerlist',
+        'utm_medium' => 'social',
+        'utm_campaign' => 'spring-launch',
+        'utm_term' => 'social-platform',
+        'utm_content' => 'cta-button',
+    ];
+
+    $this->get(route('register', $utms));
+
+    $this->post(route('register.store'), [
+        'name' => 'UTM User',
+        'email' => 'utm@example.com',
+        'password' => 'Password123!',
+    ])
+        ->assertRedirect(route('register.success', $utms, absolute: false));
+
+    $this->assertDatabaseHas('users', [
+        'email' => 'utm@example.com',
+        ...$utms,
+    ]);
+});
+
+test('email registration without utm parameters saves null utm columns and redirects without query string', function () {
+    $this->post(route('register.store'), [
+        'name' => 'No UTM User',
+        'email' => 'no-utm@example.com',
+        'password' => 'Password123!',
+    ])
+        ->assertRedirect(route('register.success', absolute: false));
+
+    $this->assertDatabaseHas('users', [
+        'email' => 'no-utm@example.com',
+        'utm_source' => null,
+        'utm_medium' => null,
+        'utm_campaign' => null,
+        'utm_term' => null,
+        'utm_content' => null,
+    ]);
+});
+
+test('email registration strips non-utm query params from the success redirect', function () {
+    $this->get(route('register', [
+        'utm_source' => 'peerlist',
+        'foo' => 'bar',
+        'ref' => '123',
+    ]));
+
+    $this->post(route('register.store'), [
+        'name' => 'Strip Test',
+        'email' => 'strip@example.com',
+        'password' => 'Password123!',
+    ])
+        ->assertRedirect(route('register.success', ['utm_source' => 'peerlist'], absolute: false));
+});
+
+test('google registration saves utm parameters captured before the oauth round-trip', function () {
+    $utms = [
+        'utm_source' => 'twitter',
+        'utm_medium' => 'paid',
+        'utm_campaign' => 'q1-growth',
+    ];
+
+    $this->get(route('auth.google.redirect', $utms));
+
+    $socialiteUser = new SocialiteUser;
+    $socialiteUser->id = 'g-utm';
+    $socialiteUser->name = 'Google UTM';
+    $socialiteUser->email = 'google-utm@example.com';
+
+    Socialite::shouldReceive('driver')
+        ->with('google-auth')
+        ->andReturn($driver = Mockery::mock());
+
+    $driver->shouldReceive('user')
+        ->andReturn($socialiteUser);
+
+    $this->get(route('auth.google.callback'))
+        ->assertRedirect(route('register.success', $utms, absolute: false));
+
+    $this->assertDatabaseHas('users', [
+        'email' => 'google-utm@example.com',
+        ...$utms,
+        'utm_term' => null,
+        'utm_content' => null,
+    ]);
+});
+
+test('utm parameters captured on the register page survive a google oauth round-trip', function () {
+    $utms = ['utm_source' => 'newsletter', 'utm_medium' => 'email'];
+
+    $this->get(route('register', $utms));
+
+    $socialiteUser = new SocialiteUser;
+    $socialiteUser->id = 'g-cross';
+    $socialiteUser->name = 'Cross Flow';
+    $socialiteUser->email = 'cross-flow@example.com';
+
+    Socialite::shouldReceive('driver')
+        ->with('google-auth')
+        ->andReturn($driver = Mockery::mock());
+
+    $driver->shouldReceive('user')
+        ->andReturn($socialiteUser);
+
+    $this->get(route('auth.google.callback'))
+        ->assertRedirect(route('register.success', $utms, absolute: false));
+
+    $this->assertDatabaseHas('users', [
+        'email' => 'cross-flow@example.com',
+        ...$utms,
+    ]);
+});
+
+test('existing google user login consumes the utm session so utms do not leak to a later signup', function () {
+    User::factory()->create([
+        'email' => 'existing@example.com',
+        'google_id' => 'g-existing',
+    ]);
+
+    $this->get(route('auth.google.redirect', ['utm_source' => 'twitter']));
+
+    $socialiteUser = new SocialiteUser;
+    $socialiteUser->id = 'g-existing';
+    $socialiteUser->name = 'Existing User';
+    $socialiteUser->email = 'existing@example.com';
+
+    Socialite::shouldReceive('driver')
+        ->with('google-auth')
+        ->andReturn($driver = Mockery::mock());
+
+    $driver->shouldReceive('user')
+        ->andReturn($socialiteUser);
+
+    $this->get(route('auth.google.callback'))
+        ->assertRedirect(route('app.home'));
+
+    expect(session()->get('utm_parameters'))->toBeNull();
+});
+
+test('invitation registration does not include utm parameters in its redirect', function () {
+    $this->get(route('register', ['utm_source' => 'email']));
+
+    $this->post(route('register.store'), [
+        'name' => 'Invited User',
+        'email' => 'invited@example.com',
+        'password' => 'Password123!',
+        'redirect' => '/invites/some-token',
+    ])
+        ->assertRedirect('/invites/some-token');
+});
+
+test('utm values longer than 255 characters are truncated before being stored', function () {
+    $longValue = str_repeat('a', 300);
+
+    $this->get(route('register', ['utm_source' => $longValue]));
+
+    $this->post(route('register.store'), [
+        'name' => 'Long UTM User',
+        'email' => 'long-utm@example.com',
+        'password' => 'Password123!',
+    ]);
+
+    $user = User::where('email', 'long-utm@example.com')->first();
+
+    expect(mb_strlen($user->utm_source))->toBe(255);
+});
+
+test('email registration captures the requesting ip address', function () {
+    $this->post(route('register.store'), [
+        'name' => 'IP User',
+        'email' => 'ip@example.com',
+        'password' => 'Password123!',
+    ]);
+
+    $user = User::where('email', 'ip@example.com')->first();
+
+    expect($user->registration_ip)->not->toBeNull();
+});
+
+test('google registration captures the requesting ip address', function () {
+    $socialiteUser = new SocialiteUser;
+    $socialiteUser->id = 'g-ip';
+    $socialiteUser->name = 'Google IP';
+    $socialiteUser->email = 'google-ip@example.com';
+
+    Socialite::shouldReceive('driver')
+        ->with('google-auth')
+        ->andReturn($driver = Mockery::mock());
+
+    $driver->shouldReceive('user')
+        ->andReturn($socialiteUser);
+
+    $this->get(route('auth.google.callback'));
+
+    $user = User::where('email', 'google-ip@example.com')->first();
+
+    expect($user->registration_ip)->not->toBeNull();
+});
+
+test('github registration saves utm parameters captured before the oauth round-trip', function () {
+    $utms = [
+        'utm_source' => 'hackernews',
+        'utm_medium' => 'organic',
+        'utm_campaign' => 'launch-week',
+    ];
+
+    $this->get(route('auth.github.redirect', $utms));
+
+    $socialiteUser = new SocialiteUser;
+    $socialiteUser->id = 'gh-utm';
+    $socialiteUser->name = 'GitHub UTM';
+    $socialiteUser->email = 'github-utm@example.com';
+
+    Socialite::shouldReceive('driver')
+        ->with('github')
+        ->andReturn($driver = Mockery::mock());
+
+    $driver->shouldReceive('scopes')
+        ->andReturnSelf();
+
+    $driver->shouldReceive('user')
+        ->andReturn($socialiteUser);
+
+    $this->get(route('auth.github.callback'))
+        ->assertRedirect(route('register.success', $utms, absolute: false));
+
+    $this->assertDatabaseHas('users', [
+        'email' => 'github-utm@example.com',
+        ...$utms,
+        'utm_term' => null,
+        'utm_content' => null,
+    ]);
+});
+
+test('github registration captures the requesting ip address', function () {
+    $socialiteUser = new SocialiteUser;
+    $socialiteUser->id = 'gh-ip';
+    $socialiteUser->name = 'GitHub IP';
+    $socialiteUser->email = 'github-ip@example.com';
+
+    Socialite::shouldReceive('driver')
+        ->with('github')
+        ->andReturn($driver = Mockery::mock());
+
+    $driver->shouldReceive('scopes')
+        ->andReturnSelf();
+
+    $driver->shouldReceive('user')
+        ->andReturn($socialiteUser);
+
+    $this->get(route('auth.github.callback'));
+
+    $user = User::where('email', 'github-ip@example.com')->first();
+
+    expect($user->registration_ip)->not->toBeNull();
+    expect($user->github_id)->toBe('gh-ip');
+});
+
+test('github registration without email redirects to login with error', function () {
+    $socialiteUser = new SocialiteUser;
+    $socialiteUser->id = 'gh-no-email';
+    $socialiteUser->name = 'No Email';
+    $socialiteUser->email = null;
+
+    Socialite::shouldReceive('driver')
+        ->with('github')
+        ->andReturn($driver = Mockery::mock());
+
+    $driver->shouldReceive('scopes')
+        ->andReturnSelf();
+
+    $driver->shouldReceive('user')
+        ->andReturn($socialiteUser);
+
+    $this->get(route('auth.github.callback'))
+        ->assertRedirect(route('login'))
+        ->assertSessionHasErrors('email');
+
+    $this->assertGuest();
+});
+
+test('existing github user login consumes the utm session and skips signup success', function () {
+    User::factory()->create([
+        'email' => 'existing-gh@example.com',
+        'github_id' => 'gh-existing',
+    ]);
+
+    $this->get(route('auth.github.redirect', ['utm_source' => 'hackernews']));
+
+    $socialiteUser = new SocialiteUser;
+    $socialiteUser->id = 'gh-existing';
+    $socialiteUser->name = 'Existing GitHub';
+    $socialiteUser->email = 'existing-gh@example.com';
+
+    Socialite::shouldReceive('driver')
+        ->with('github')
+        ->andReturn($driver = Mockery::mock());
+
+    $driver->shouldReceive('scopes')
+        ->andReturnSelf();
+
+    $driver->shouldReceive('user')
+        ->andReturn($socialiteUser);
+
+    $this->get(route('auth.github.callback'))
+        ->assertRedirect(route('app.home'));
+
+    expect(session()->get('utm_parameters'))->toBeNull();
+});
diff --git a/tests/Feature/GitHubAuthToggleTest.php b/tests/Feature/GitHubAuthToggleTest.php
new file mode 100644
index 00000000..8d24829f
--- /dev/null
+++ b/tests/Feature/GitHubAuthToggleTest.php
@@ -0,0 +1,54 @@
+<?php
+
+declare(strict_types=1);
+
+test('login page shares github auth enabled prop as false when disabled', function () {
+    config(['trypost.github_auth_enabled' => false]);
+
+    $response = $this->get(route('login'));
+
+    $response->assertOk();
+
+    $page = $response->original->getData()['page'];
+    expect($page['props']['githubAuthEnabled'])->toBeFalse();
+});
+
+test('login page shares github auth enabled prop as true when enabled', function () {
+    config(['trypost.github_auth_enabled' => true]);
+
+    $response = $this->get(route('login'));
+
+    $response->assertOk();
+
+    $page = $response->original->getData()['page'];
+    expect($page['props']['githubAuthEnabled'])->toBeTrue();
+});
+
+test('register page shares github auth enabled prop', function () {
+    config(['trypost.github_auth_enabled' => true]);
+
+    $response = $this->get(route('register'));
+
+    $response->assertOk();
+
+    $page = $response->original->getData()['page'];
+    expect($page['props']['githubAuthEnabled'])->toBeTrue();
+});
+
+test('github auth redirect route exists', function () {
+    config(['services.github.client_id' => 'test-id']);
+    config(['services.github.client_secret' => 'test-secret']);
+    config(['services.github.redirect' => 'https://app.trypost.test/auth/github/callback']);
+
+    $response = $this->get(route('auth.github.redirect'));
+
+    // Should redirect to GitHub OAuth, not 404
+    $response->assertRedirect();
+});
+
+test('github auth callback route exists', function () {
+    $response = $this->get(route('auth.github.callback'));
+
+    // Should redirect to login on failure (no OAuth code), not 404
+    $response->assertRedirect(route('login'));
+});

From 7dc954df78673c126a46f5bd618682c88d5554f9 Mon Sep 17 00:00:00 2001
From: Paulo Castellano <paulo@castellanos.llc>
Date: Mon, 4 May 2026 18:47:54 -0300
Subject: [PATCH 2/4] fix: tighten gap between social login buttons

---
 resources/js/components/auth/SocialLogin.vue | 18 ++++++++++--------
 1 file changed, 10 insertions(+), 8 deletions(-)

diff --git a/resources/js/components/auth/SocialLogin.vue b/resources/js/components/auth/SocialLogin.vue
index bb8a8f6f..0bbda918 100644
--- a/resources/js/components/auth/SocialLogin.vue
+++ b/resources/js/components/auth/SocialLogin.vue
@@ -19,15 +19,17 @@ const hasSocial = computed(() => googleEnabled.value || githubEnabled.value);
 
 <template>
     <template v-if="hasSocial">
-        <Button v-if="googleEnabled" variant="outline" class="w-full" as="a" :href="googleRedirect.url()">
-            <img src="/images/social/google.svg" alt="Google" class="size-4" />
-            {{ mode === 'login' ? $t('auth.google_login') : $t('auth.google_signup') }}
-        </Button>
+        <div class="flex flex-col gap-2">
+            <Button v-if="googleEnabled" variant="outline" class="w-full" as="a" :href="googleRedirect.url()">
+                <img src="/images/social/google.svg" alt="Google" class="size-4" />
+                {{ mode === 'login' ? $t('auth.google_login') : $t('auth.google_signup') }}
+            </Button>
 
-        <Button v-if="githubEnabled" variant="outline" class="w-full" as="a" :href="githubRedirect.url()">
-            <IconBrandGithub class="size-4" />
-            {{ mode === 'login' ? $t('auth.github_login') : $t('auth.github_signup') }}
-        </Button>
+            <Button v-if="githubEnabled" variant="outline" class="w-full" as="a" :href="githubRedirect.url()">
+                <IconBrandGithub class="size-4" />
+                {{ mode === 'login' ? $t('auth.github_login') : $t('auth.github_signup') }}
+            </Button>
+        </div>
 
         <div
             class="relative text-center text-sm after:absolute after:inset-0 after:top-1/2 after:z-0 after:flex after:items-center after:border-t after:border-border"

From 0a72a2d547d422aaf4db203d66dd52c1ade8628d Mon Sep 17 00:00:00 2001
From: Paulo Castellano <paulo@castellanos.llc>
Date: Mon, 4 May 2026 18:51:06 -0300
Subject: [PATCH 3/4] fix: use GitHub SVG mark instead of Tabler icon for brand
 consistency

---
 public/images/social/github.svg                       | 10 ++++++++++
 resources/js/components/auth/SocialLogin.vue          |  3 +--
 .../js/pages/settings/profile/Authentication.vue      | 11 +++--------
 3 files changed, 14 insertions(+), 10 deletions(-)
 create mode 100644 public/images/social/github.svg

diff --git a/public/images/social/github.svg b/public/images/social/github.svg
new file mode 100644
index 00000000..77e01066
--- /dev/null
+++ b/public/images/social/github.svg
@@ -0,0 +1,10 @@
+<svg
+    xmlns="http://www.w3.org/2000/svg"
+    width="24"
+    height="24"
+    viewBox="0 0 24 24"
+>
+    <path
+        d="M12 0c-6.626 0-12 5.373-12 12 0 5.302 3.438 9.8 8.207 11.387.599.111.793-.261.793-.577v-2.234c-3.338.726-4.033-1.416-4.033-1.416-.546-1.387-1.333-1.756-1.333-1.756-1.089-.745.083-.729.083-.729 1.205.084 1.839 1.237 1.839 1.237 1.07 1.834 2.807 1.304 3.492.997.107-.775.418-1.305.762-1.604-2.665-.305-5.467-1.334-5.467-5.931 0-1.311.469-2.381 1.236-3.221-.124-.303-.535-1.524.117-3.176 0 0 1.008-.322 3.301 1.23.957-.266 1.983-.399 3.003-.404 1.02.005 2.047.138 3.006.404 2.291-1.552 3.297-1.23 3.297-1.23.653 1.653.242 2.874.118 3.176.77.84 1.235 1.911 1.235 3.221 0 4.609-2.807 5.624-5.479 5.921.43.372.823 1.102.823 2.222v3.293c0 .319.192.694.801.576 4.765-1.589 8.199-6.086 8.199-11.386 0-6.627-5.373-12-12-12z"
+    />
+</svg>
diff --git a/resources/js/components/auth/SocialLogin.vue b/resources/js/components/auth/SocialLogin.vue
index 0bbda918..ca396868 100644
--- a/resources/js/components/auth/SocialLogin.vue
+++ b/resources/js/components/auth/SocialLogin.vue
@@ -1,6 +1,5 @@
 <script setup lang="ts">
 import { usePage } from '@inertiajs/vue3';
-import { IconBrandGithub } from '@tabler/icons-vue';
 import { computed } from 'vue';
 
 import { Button } from '@/components/ui/button';
@@ -26,7 +25,7 @@ const hasSocial = computed(() => googleEnabled.value || githubEnabled.value);
             </Button>
 
             <Button v-if="githubEnabled" variant="outline" class="w-full" as="a" :href="githubRedirect.url()">
-                <IconBrandGithub class="size-4" />
+                <img src="/images/social/github.svg" alt="GitHub" class="size-4 dark:invert" />
                 {{ mode === 'login' ? $t('auth.github_login') : $t('auth.github_signup') }}
             </Button>
         </div>
diff --git a/resources/js/pages/settings/profile/Authentication.vue b/resources/js/pages/settings/profile/Authentication.vue
index f42a7ac6..a75f3822 100644
--- a/resources/js/pages/settings/profile/Authentication.vue
+++ b/resources/js/pages/settings/profile/Authentication.vue
@@ -1,6 +1,6 @@
 <script setup lang="ts">
 import { Form, Head, Link } from '@inertiajs/vue3';
-import { IconBrandGithub, IconDeviceDesktop, IconDeviceMobile } from '@tabler/icons-vue';
+import { IconDeviceDesktop, IconDeviceMobile } from '@tabler/icons-vue';
 import { trans } from 'laravel-vue-i18n';
 import { computed, ref } from 'vue';
 
@@ -298,14 +298,9 @@ const logoutDialogOpen = ref(false);
                         >
                             <div class="flex size-10 flex-shrink-0 items-center justify-center rounded-full bg-muted">
                                 <img
-                                    v-if="account.provider === 'google'"
-                                    src="/images/social/google.svg"
+                                    :src="`/images/social/${account.provider}.svg`"
                                     :alt="account.label"
-                                    class="size-5"
-                                />
-                                <IconBrandGithub
-                                    v-else-if="account.provider === 'github'"
-                                    class="size-5"
+                                    :class="['size-5', account.provider === 'github' ? 'dark:invert' : '']"
                                 />
                             </div>
                             <div class="flex-1 space-y-0.5">

From ffb2f673ec0e757b3eb3ef34ceca4d6b3780fe26 Mon Sep 17 00:00:00 2001
From: Paulo Castellano <paulo@castellanos.llc>
Date: Mon, 4 May 2026 18:53:21 -0300
Subject: [PATCH 4/4] docs: document GitHub OAuth env vars in .env.example

---
 .env.example | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/.env.example b/.env.example
index 7a537c82..4e38edbf 100644
--- a/.env.example
+++ b/.env.example
@@ -124,11 +124,19 @@ THREADS_CLIENT_REDIRECT="${APP_URL}/accounts/threads/callback"
 
 # Google (https://console.cloud.google.com)
 # Used for YouTube social account connection AND Google login/signup
+GOOGLE_AUTH_ENABLED=false
 GOOGLE_CLIENT_ID=
 GOOGLE_CLIENT_SECRET=
 GOOGLE_CLIENT_REDIRECT="${APP_URL}/accounts/youtube/callback"
 GOOGLE_AUTH_CALLBACK="${APP_URL}/auth/google/callback"
 
+# GitHub (https://github.com/settings/developers)
+# Used for GitHub login/signup
+GITHUB_AUTH_ENABLED=false
+GITHUB_CLIENT_ID=
+GITHUB_CLIENT_SECRET=
+GITHUB_AUTH_CALLBACK="${APP_URL}/auth/github/callback"
+
 # Pinterest (https://developers.pinterest.com)
 PINTEREST_CLIENT_ID=
 PINTEREST_CLIENT_SECRET=