search

remotion-dev / github-unwrapped-2023

Your coding year in review
https://www.githubunwrapped.com
871 stars 62 forks source link

Why Unwrapped needs Write permission #174

Closed JonnyBurger closed 11 months ago

JonnyBurger commented 11 months ago

There are two types of logins: GitHub apps and OAuth logins.

We found that with GitHub apps, every organization admin needs to grant access in order for the data to be included in Unwrapped.

OAuth apps don't have this limitation, but are not fine-grained - we require the repo scope which also grants write access.

Of course we don't write to the account, we also don't keep the access token after the stats have been fetched, abstaining ourselves from any future access to your account.

The authentication code we deploy is available under https://github.com/remotion-dev/github-unwrapped-2023

Nonetheless, it would be nice if we could require a narrower scope. We'll pass this on as feedback to GitHub!

JonnyBurger commented 11 months ago

It would be nice if we added this to the FAQ, if someone wants to pick this