Receiving an error "Resource not accessible by integration"

[blackgirlbytes]

Hi! I'm developing a severrless probot application and using octokit to make API requests. Ran into a problem with one of my API calls where I'm now receiving an error that says "Resource not accessible by integration". This is the full error:

    HttpError: Resource not accessible by integration
        at /var/task/node_modules/@octokit/request/dist-node/index.js:86:21
        at async sendRequestWithRetries (/var/task/node_modules/@octokit/auth-app/dist-node/index.js:466:12)
        at async checkForEmployee (/var/task/index.js:18:18)
        at async assignTeams (/var/task/index.js:101:7)
        at async /var/task/index.js:159:7
        at async Promise.all (index 0)
        at async lambdaFunction (/var/task/node_modules/@probot/adapter-aws-lambda-serverless/lambda-function.js:15:5)
    at /var/task/node_modules/@probot/adapter-aws-lambda-serverless/node_modules/@octokit/webhooks/dist-node/index.js:187:19
    at processTicksAndRejections (internal/process/task_queues.js:97:5)
    at async lambdaFunction (/var/task/node_modules/@probot/adapter-aws-lambda-serverless/lambda-function.js:15:5) {
  event: {
    id: 'f15e9c00-53b8-11ec-8c03-58d0868c8625',
    name: 'star',
    payload: {
      action: 'created',
      starred_at: '2021-12-02T21:43:52Z',
      repository: [Object],
      organization: [Object],
      sender: [Object],
      installation: [Object]
    }
  },
  errors: [
    RequestError [HttpError]: Resource not accessible by integration
        at /var/task/node_modules/@octokit/request/dist-node/index.js:86:21
        at processTicksAndRejections (internal/process/task_queues.js:97:5)
        at async sendRequestWithRetries (/var/task/node_modules/@octokit/auth-app/dist-node/index.js:466:12)
        at async checkForEmployee (/var/task/index.js:18:18)
        at async assignTeams (/var/task/index.js:101:7)
        at async /var/task/index.js:159:7
        at async Promise.all (index 0)
        at async lambdaFunction (/var/task/node_modules/@probot/adapter-aws-lambda-serverless/lambda-function.js:15:5) {
      status: 403,
      response: [Object],
      request: [Object],
      event: [Object]
    }
  ]
}

Here's what my code looks like

// require the module getParam from ssm-handler
const { Octokit } = require("@octokit/core");
const { createAppAuth } = require("@octokit/auth-app");


/**
 * This is the main entrypoint to your Probot app
 * @param {import('probot').Probot} app
 * 
 * 
 */


async function checkForEmployee(user, octokit) {
  console.log('checking for employee status')
  let employeeStatus
  console.log('trying to get the employee status result for...', user)
  const result = await octokit.request('GET /orgs/{org}/teams/{team_slug}/memberships/{username}', {
    org: 'github',
    team_slug: 'employees',
    username: user
  })
  console.log('print the result underneath!!!!!')
  console.log(result)
  console.log('the result should be printed above')
  // if (result) {
  //   if (result.status === 204) {
  //     console.log("user is employee of github", result.status);
  //     employeeStatus = true;
  //   }
  // }
  // console.log('what is employee status', employeeStatus)
  // return employeeStatus;
}

async function addUserToTeam(user, employeeStatus, octokit) {
  const team_slug = employeeStatus ? 'github-employees' : 'members';
  const result = await octokit.request('PUT /orgs/{org}/teams/{team_slug}/memberships/{username}', {
    org: 'maintainers',
    team_slug: team_slug,
    username: user,
    role: 'member'
  }).catch(async (err) => {
    if (err.status === 403) {
      console.log(`Forbidden ${err.status}`)
    }
    if (err.status === 422) {
      console.log(`Unprocessable Entity ${err.status}`);
    }
  }
  );
  if (result) {
    if (result.status === 200) {
      console.log("user added to team", result.status);
    }
  }
}

async function openIssue(user, octokit) {
  console.log('opening issue')
  const result = await octokit.request('POST /repos/{owner}/{repo}/issues', {
    owner: 'maintainers',
    repo: 'invite-automation',
    labels: ['pending-invitation'],
    title: `Pending invitation request for: @${user}`,
    body: `Please take actions on adding the requested user to this repo:

- [ ] Assign this ticket to the correct user
- [ ] Confirm that @${user} should be added as a member
- [ ] Send an invite
*This issue body is just a placeholder and will change as this project grows*`,
  }).catch(err => {
    console.log('err', err)
    if (err.status === 403) {
      console.log(`Forbidden ${err.status}`)
    }
    if (err.status === 422) {
      console.log(`Unprocessable Entity ${err.status}`);
    }
  }
  );

  if (result === 201) {
    console.log("opened an issue", result);
  }
}

async function assignTeams(user, octokit) {
  const result = await octokit.request("GET /orgs/{org}/members/{username}", {
    username: user,
    org: "maintainers",
  }).catch(async (err) => {
    if (err.status === 404) {
      console.log("user is not a team member but part of the org", err.status);
      await openIssue(user, octokit);
    }
  });
  if (result) {
    if (result.status === 204) {
      console.log("user is part of org", result);
      await checkForEmployee(user, octokit);
      // await addUserToTeam(user, employeeStatus, octokit);
    }
    if (result.status === 302) {
      console.log("user is not part of org", result);
      await openIssue(user, octokit);
    }
  }
}

module.exports = (app) => {
  app.on("star", async (context) => {
    const { appId, privateKey, clientSecret, clientId } = await require("./ssm-handler");
    const octokit = new Octokit({
      authStrategy: createAppAuth,
      auth: {
        appId: appId,
        privateKey: privateKey,
        clientId: clientId,
        clientSecret: clientSecret,
        installationId: context.payload.installation.id
      },
    });

    app.log.info(`the user is ${context.payload.sender.login}`)
    const user = context.payload.sender.login
    app.log.info('opening an issue')
    if (user) {
      console.log('user is not null', user)
      await assignTeams(user, octokit);
    }
  });
};

The error is occurring in the function checkForEmployees() on this API call await octokit.request('GET /orgs/{org}/teams/{team_slug}/memberships/{username}'.

This was previously working, so I'm wondering if this is an issue with how I'm authenticating the GitHub App.

Any help would be appreciated!!! Thank you.

[blackgirlbytes]

Adding more context ..I added a ton of permissions , but the one that matters here..I THINK is members.

This api call works when I change the org name to the org that this GitHub app is installed in, but is there a way to get permissions for the GitHub App to make this call GET /orgs/{org}/teams/{team_slug}/memberships/{username} in a different organization