Error when configuring GitHub as OIDC provider

[gknepper]

I'm getting an error when trying to use GitHub as OIDC provider

My settings are:

"oidc_providers": {
   "github": {
         "icon": "github",
         "display_name": "Sign in with GitHub",
         "client_id": "***********************",
         "client_secret": ""***********************"",
         "redirect_url": "https://internaldomain.com/api/auth/oidc/github/redirect",
         "endpoint": {
           "auth": "https://github.com/login/oauth/authorize",
           "token": "https://github.com/login/oauth/access_token",
           "userinfo": "https://api.github.com/user"
         },
         "scopes": ["read:user", "user:email"]
       }
 },

On GitHub I set the same "redirect_url" as "Authorization callback URL"

When I try to login I get:

On Semaphore v2.9.45
ERRO[1056] oauth2: server response missing access_token
On Semaphore v2.9.53-beta
ERRO[0007] claim 'email' missing from id_token or not a string

Any tips on that or any way to make the debug more verbose ?
Thanks

[fiftin]

Correct GitHub config you can find in the docs: https://docs.semui.co/administration-guide/openid#github-auth

{
  "oidc_providers": {
    "github": {
      "icon": "github",
      "display_name": "Sign in with GitHub",
      "client_id": "***",
      "client_secret": "***",
      "redirect_url": "https://your-domain.com/api/auth/oidc/github/redirect",
      "endpoint": {
        "auth": "https://github.com/login/oauth/authorize",
        "token": "https://github.com/login/oauth/access_token",
        "userinfo": "https://api.github.com/user"
      },
      "scopes": ["read:user", "user:email"],
      "email_suffix": "github-your-domain.com", // this suffix will be used to make email for users with hidden email: <GITHUB_ID>@github-your-domain.com"
      "username_claim": "id",
      "name_claim": "name"
    }
  }
}