pilcrowonpaper/arctic

Feature request: Github App Provider

Closed this issue · 6 comments

It seems like the GitHub provider is expecting/using the Oauth app type. However, Github are now recommending github apps to be used in favour of oauth apps: https://docs.github.com/en/enterprise-cloud@latest/apps/overview#github-apps-and-oauth-apps

Relevant documentation for generating a user access token: https://docs.github.com/en/enterprise-cloud@latest/apps/creating-github-apps/authenticating-with-a-github-app/generating-a-user-access-token-for-a-github-app#using-the-device-flow-to-generate-a-user-access-token

Are you referring to GitHub Apps or device code login?

@pilcrowonpaper I'd be interested in hearing how you think one should implement Oauth flow using a GitHub App (as opposed to a GitHub OAuth App)? Regular Oauth login, not device flow.

Sorry, I'm a bit confused what needs to be done to support GitHub Apps? Doesn't it just use the same OAuth 2.0 flow with the same endpoints?

Yes, I realized that 0.2 seconds after I posted this. It works the same for GitHub Apps and GitHub OAuth Apps.

Closing this unless there's a change that needs to be done by us

@pilcrowonpaper Thanks for Lucia (and Arctic, and Oslo).

I switched my Next.js project over from Auth.js and find it a lot more straightforward.