📝 Document hf_oauth_authorized_org

docs/hub/spaces-config-reference.md

@@ -91,6 +91,9 @@ Authorized scopes of the connected OAuth app. `openid` and `profile` are authori
 **`hf_oauth_expiration_minutes`** : _int_
 Duration of the OAuth token in minutes. Defaults to 480 minutes (8 hours). Maximum duration is 43200 minutes (30 days). See [Adding a Sign-In with HF button to your space](https://huggingface.co/docs/hub/spaces-oauth) for more details.
 
+**`hf_oauth_authorized_org`** : _string_ or _List[string]_
+Restrict OAuth access to members of specific organizations. See [Adding a Sign-In with HF button to your space](https://huggingface.co/docs/hub/spaces-oauth) for more details.
+
 **`disable_embedding`** : _boolean_  
 Whether the Space iframe can be embedded in other websites.
 Defaults to false, i.e. Spaces *can* be embedded.

docs/hub/spaces-oauth.md

@@ -41,6 +41,11 @@ hf_oauth_scopes:
  - write-repos
  - manage-repos
  - inference-api
+# optional, restrict access to members of specific organizations
+hf_oauth_authorized_org: ORG_NAME
+hf_oauth_authorized_org:
+  - ORG_NAME1
+  - ORG_NAME2
 ```
 
 You can check out the [configuration reference docs](./spaces-config-reference) for more information.