Replicate App "in house" for privacy issues

[rdohms]

Due to the lack of fine grained read-only repo access, this app will likely never be accepted in our internal GHEC instance.

One possibility I see is to replicate the app locally in our GHEC. Can you provide some more details, for example the OAuth callback, do you use it and what do you run on the server-side for this?