electron-updater-example icon indicating copy to clipboard operation
electron-updater-example copied to clipboard

Change token in a private repo

Open pedro-sigma opened this issue 3 years ago • 3 comments

I am developping a new app using Electron for an enterprise and I am having problems to update the app.

When you are generating a new token for your app, Github recommends you set an expiration date.

image

But if I set it, how can hay change my token when the app is in producction? What is the correct way to doit?

Thank you very much.

pedro-sigma avatar Oct 26 '22 11:10 pedro-sigma

The token is only used on your local machine to upload your app to GitHub, so regenerating and using a new token should not be a problem and will not affect the app on other people's computers.

iffy avatar Oct 26 '22 13:10 iffy

Bug the repo is private, so I need to send the token to download the new version, isn't it?

pedro-sigma avatar Oct 26 '22 13:10 pedro-sigma

You shouldn't be publishing or sending out your personal access token. It's equivalent to sharing your GitHub password.

Look through this documentation, which allows you more control over how the application calls home to GitHub: https://www.electron.build/configuration/publish#githuboptions

iffy avatar Oct 26 '22 14:10 iffy