-
Notifications
You must be signed in to change notification settings - Fork 282
Labels
enhancementNew feature or enhancement to existing functionalityNew feature or enhancement to existing functionalitypriority:highItems of high importance. Applicable to all users or use-casesItems of high importance. Applicable to all users or use-cases
Description
Refactor the Login with GitHub OAuth flow to improve security and remove the need for client_secrets to be shared.
Options
- Add PKCE to our OAuth Web Flow - docs
- Migrate from
OAuth ApptoGitHub App- docs - Migrate from
OAuth App with Web FlowtoOAuth App with Device Code Flow- docs
I believe Option 3 is the only viable path since we are bundling and distributing a self-contained app without any secure server-side layer.
Metadata
Metadata
Assignees
Labels
enhancementNew feature or enhancement to existing functionalityNew feature or enhancement to existing functionalitypriority:highItems of high importance. Applicable to all users or use-casesItems of high importance. Applicable to all users or use-cases