Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support for interactive user authentication. #81

Open
gavinbarron opened this issue Jul 29, 2024 · 1 comment
Open

Support for interactive user authentication. #81

gavinbarron opened this issue Jul 29, 2024 · 1 comment
Labels
question Further information is requested

Comments

@gavinbarron
Copy link

gavinbarron commented Jul 29, 2024

It would be really nice if you could provide support for interactive authentication flows in the new Kiota based SDKs.

As a rule Microsoft is moving away from using PATs as part of our ongoing security work.
Providing support for end user applications that don't require PATs would be a great benefit to those of us looking to use these SDKs in user contexts.

Ideally, I'd like to see support for the device code flow

@nickfloyd nickfloyd added the question Further information is requested label Aug 5, 2024
@nickfloyd
Copy link
Collaborator

Hey @gavinbarron thanks for reaching out. For clarity, the GitHub REST API currently has a few different types of Authentication:

  1. Unauthenticated (some endpoints do not require auth) - currently supported by both generated SDKs
  2. Basic Authentication - currently supported by both generated SDKs
  3. Authenticating with a personal access token (since you mentioned this above, I know this is not what you are referring to) - currently supported by both generated SDKs
  4. Authenticating with a token generated by an app - currently supported by both generated SDKs
  5. GitHub OAuth - NOT supported by either generated SDK.

My guess is that you might be asking about OAuth based workflows. Currently, we do not have any immediate plans implement OAuth flows into the SDKs. The favored approach is to use apps auth instead. The general feeling is that since GitHub Apps uses fine-grained permissions that allows users to have more control over access. Have a read of the differences here between the two and let us know your thoughts.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
question Further information is requested
Projects
None yet
Development

No branches or pull requests

2 participants