radishconcepts / WordPress-GitHub-Plugin-Updater

This class is meant to be used with your Github hosted WordPress plugins. The purpose of the class is to allow your WordPress plugin to be updated whenever you push out a new version of your plugin; similarly to the experience users know and love with the WordPress.org plugin repository.
https://github.com/jkudish/WordPress-GitHub-Plugin-Updater
822 stars 195 forks source link

Token & Download #72

Closed CodersPress closed 8 years ago

CodersPress commented 9 years ago

When do you think you might release 1.7?

I need some kind of token_access or I'll get penalized on API attempts - Any idea which I should be choosing for a PUBLIC REPO ?

repo repo:status repo_deployment public_repo delete_repo user user:email user:follow admin:org write:org read:org admin:public_key write:public_key read:public_key admin:repo_hook write:repo_hook read:repo_hook admin:org_hook gist notifications

afragen commented 9 years ago

repo and public_repo are all that is really needed here. That's what I'm using in GitHub Updater.

CodersPress commented 9 years ago

Thanks for the reply...

Seems leaving everything unchecked is just as good... it becomes public_access

Note: I was unable to select both repo and public_repo it defaulted to just repo

Also with just public_repo selected I was emailed a (warning) notice that my access_key wasn't safe and i was deactivated.

We noticed that a valid OAuth access token of yours was committed to a public GitHub repository, xxxxxxxx/xxxxxxx. Publicly disclosing a valid access token would allow other people to interact with GitHub on your behalf, potentially altering data, your contact information, and billing data.

As a precautionary measure, we have revoked the OAuth token. A new token will need to be generated in order to continue using OAuth to authenticate to GitHub. Here are a couple of steps you can do to ensure your account security has not been compromised:

Please feel free to contact us at support@github.com if you have any questions or concerns.

Thanks, GitHub.com

afragen commented 9 years ago

Did you accidentally set this for a particular repo and not under personal settings?

CodersPress commented 9 years ago

Settings -> Personal Access Tokens -> Generate new token...

I just gave it a name and pasted that key to my plugin config?

afragen commented 9 years ago

It's not the name you use, it's the actual token.

afragen commented 9 years ago

https://github.com/settings/tokens/new

CodersPress commented 9 years ago

Yeah I know the key - the Token Key -eg: 46565jk46h45hk6hk45jh654jk654kj6h45h6h45k

I meant I just give it a Description (Name)

Anyway not to worry about that... its fine just leaving all un-ticked.

Any ideas about this : https://github.com/radishconcepts/WordPress-GitHub-Plugin-Updater/issues/73

afragen commented 9 years ago

Actually, yes. I sent you an email.