gitalk icon indicating copy to clipboard operation
gitalk copied to clipboard

Possible to allow users to log in without write permission to all their repos?

Open trusktr opened this issue 4 years ago • 4 comments

Can we configure GitHub auth so that when user logs in, they don't have to give us write permission to all their repos?

Why does it need a permission to write to user's repos?

trusktr avatar Aug 11 '19 23:08 trusktr

Because gitalk use github api, github api do not support such configure

miaowm5 avatar Sep 23 '19 10:09 miaowm5

well gitalk uses oath apps, what about gitalk using a normal github app where you can fine grain the permissions, would that be possible ? i think so right ?

cause maybe i could try to implement that

breuerfelix avatar Jun 19 '20 07:06 breuerfelix

I actually think this is a big issue. I'm currently testing out how to do commenting in a new blog. Gitalk seams to fit perfectly, however, I had to skip gitalk when I saw this..

This application will be able to read and write all public repository data. This includes the following:

Code
Issues
Pull requests
Wikis
Settings
Webhooks and services
Deploy keys

There needs to be a better way.. What about a normal github app as @breuerfelix suggested?

xeor avatar Jan 11 '21 21:01 xeor

@booxood sorry for mentioning you here, just picked the latest contributor.
is this something on your agenda ?

breuerfelix avatar Jan 12 '21 08:01 breuerfelix