Add support for authentication with JWT #405

Activity

1. Christopher Capito (ChristopherCapito)

   added

   supportUser support questionsUser support questions

   triage neededAn issue that needs to be reviewed by a member of the team.An issue that needs to be reviewed by a member of the team.

   on Apr 19, 2023
2. Howard Wolosky (HowardWolosky)

   added

   up for grabsAnyone in the community is welcome to do this workAnyone in the community is welcome to do this work

   api completenessThis is basic API functionality that hasn't been implemented yet.This is basic API functionality that hasn't been implemented yet.

   help wantedAnyone in the community is welcome to do this workAnyone in the community is welcome to do this work

   and removed

   supportUser support questionsUser support questions

   triage neededAn issue that needs to be reviewed by a member of the team.An issue that needs to be reviewed by a member of the team.

   on Apr 20, 2023
3. Howard Wolosky (HowardWolosky)

   changed the title [-]Can this be used with a GitHub App Token?[/-] [+]Add support for authentication with JWT[/+] on Apr 20, 2023
4. HowardWolosky commented on Apr 20, 2023

   

   Howard Wolosky (HowardWolosky)

   on Apr 20, 2023

   Contributor

   More actions

   Is it possible to also use a GitHub App AccessToken? I know that in order to get that we need a signed JWT, but that could be accomplished with PowerShell I think, provided we provide a certificate.

   This project doesn't currently support that, but I'm totally open to submissions to add that support.

   Alternatively, is it possible to provide my own Bearer Token?

   At the moment, no.
   Here you can see how we compose the Authorization header:

   PowerShellForGitHub/GitHubCore.ps1

   Lines 250 to 254 in 516be0b

   	$AccessToken = Get-AccessToken -AccessToken $AccessToken
   	if (-not [String]::IsNullOrEmpty($AccessToken))
   	{
   	$headers['Authorization'] = "token $AccessToken"
   	}

   This uses the token syntax as opposed to the Bearer syntax (which a JWT would require).
5. ChristopherCapito commented on Apr 21, 2023

   

   Christopher Capito (ChristopherCapito)

   on Apr 21, 2023

   Author

   More actions

   Understood. Yeah I noticed some functionality I would need is missing from the API implementation as well. I ll see what I can contribute once I have finished my work.