Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

provide 2 options to log in with different app privileges #187

Merged
merged 4 commits into from
Nov 19, 2020

Conversation

deniak
Copy link
Member

@deniak deniak commented Nov 16, 2020

The repository manager currently asks for the following privileges:

  • user:email
  • public_repo
  • write:repo_hook
  • read:org

From the scope documentation, public_repo is enough to comment on behalf of the user.
The write:repo_hook is only necessary if you need to import/create a repository.

That PR provides limits the privileges we asked the regular contributors and provides an alternate link asking for more access for people who wish add a new repository.

Fix #164

Copy link
Member

@dontcallmedom dontcallmedom left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

any chance you could add tests to match the new API end point and the new login flow?

Also, I think #164 suggested not even requiring public_repo and instead post a comment from the app's login (rather than the user), but @-mentioning the logged-in user - that could be done as a further iteration without blocking this PR which is already a huge improvement.

@deniak
Copy link
Member Author

deniak commented Nov 18, 2020

The PR now uses @w3cbot to comment on behalf of the user (a token will need to be generated with public_repo acess and copied in config.js before deployment).

Copy link
Member

@dontcallmedom dontcallmedom left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

brilliant, thank you so much!

@deniak deniak merged commit e13fdf6 into master Nov 19, 2020
@deniak deniak deleted the alt-app-scope branch November 19, 2020 10:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

"Repository webhooks and services" should not be required
2 participants