github auth diff between OAuth App vs Github App
See original GitHub issueWe got the following bug ticket for one of our plugins: https://github.com/RoadieHQ/roadie-backstage-plugins/issues/385 If you use a github OAuth App it will persist your session, however if you use a Github App it won’t.
After researching it a bit I don’t think this behaviour is plugin specific. I was able to reproduce it without adding any of our github plugins. My question is: Is it intended that they are not working the same? actually can they work the same?
Expected Behavior
OAuth App and Github App handles the session the same
Current Behavior
If you use a Github App for authentication you’ll need to relogin after every page refresh
Possible Solution
Steps to Reproduce
- Configure a Github App as an auth provider
- Log in
- Refresh page
- You’ll need to log in again.
Your Environment
- NodeJS Version (v14):
- Operating System and Version (e.g. Ubuntu 14.04):
- Browser Information:
Issue Analytics
- State:
- Created 2 years ago
- Reactions:4
- Comments:15 (15 by maintainers)
Top Results From Across the Web
GitHub OAuth Apps vs GitHub Apps
A GitHub OAuth App is an application that acts on behalf of the authorizing user. It only has access to the user's resources....
Read more >Integrating with GitHub - GitHub Apps and OAuth | Blog
Unlike OAuth applications, you select the scopes your GitHub App requires in the App settings, where it is then fixed for every user...
Read more >What is the difference between a GitHub App and ...
An OAuth App acts as a GitHub user, whereas a GitHub App uses its own identity when installed on an organization or on...
Read more >GitHub App Auth Flow
In a nutshell, an OAuth App acts as a GitHub user, whereas a GitHub App uses its own identity when installed on an...
Read more >Introducing fine-grained personal access tokens for GitHub
As a result, you need to use a PAT (classic) or oAuth app when calling these APIs. Over time, we'll be expanding API...
Read more >
Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free
Top Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Just tested locally on latest master and the issue seems to be resolved 🎉
Hopefully shipping a fix for this in #9294, would be awesome if someone could try out reproducing the issue there to check that it’s fixed