Updates format of authorization when sending requests to github's api
Instead of using the student's own access token to find the latest commit in their repo, now each course is configured with a GITHUB_TOKEN in the database and that token is used to find the latest commit in their repo. This way we can set the OAuth scope to none, so we don't have access to any other of the student's private repos.
Tested these changes with local instance of on-demand.
Changes:
GITHUB_TOKEN
in the database and that token is used to find the latest commit in their repo. This way we can set the OAuth scope tonone
, so we don't have access to any other of the student's private repos.Tested these changes with local instance of on-demand.