RayLabsHQ/gitea-mirror
1
0
Fork 0
mirror of https://github.com/RayLabsHQ/gitea-mirror.git synced 2026-10-28 17:21:54 +01:00
Code Issues Packages Projects Releases 5 Wiki Activity

feat: GitHub App installation auth for GitHub sources (#457)

Browse Source 
Adds GitHub App installation as an authentication option for GitHub sources, with installation token refresh for Gitea 1.27+ pull mirrors, credential redaction, and the account filters applied to installation listings.
This commit is contained in:
Jeremy Williams
2026-10-20 08:38:28 +05:30
committed by GitHub
parent a9ae6047c9
commit e5b4f751b3
37 changed files with 1065 additions and 100 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/hooks/useConfigStatus.ts
+12 -14
View File
@@ -42,6 +42,13 @@ const cacheSubscribers = new Set<() => void>();
// of them at once, and without this each would fire its own request.
let inFlightRequest: { userId: string; promise: Promise<ConfigApiResponse> } | null = null;
export function hasConfiguredSource(configResponse: ConfigApiResponse | null): boolean {
return Boolean(
configResponse?.githubConfig?.token ||
configResponse?.sources?.some(source => source.provider === 'github' && source.authType === 'app')
);
}
function fetchConfigOnce(userId: string): Promise<ConfigApiResponse> {
if (inFlightRequest && inFlightRequest.userId === userId) {
return inFlightRequest.promise;
@@ -107,13 +114,9 @@ export function useConfigStatus(): ConfigStatus {
if (isCacheValid && hasCheckedRef.current) {
const configResponse = configCache.data!;
// Only token/url are actually required at runtime: the GitHub token is
// self-authenticating for listForAuthenticatedUser, and a Gitea username
// isn't needed under single-org / flat mirror strategies. Users who
// configure via env vars without GITHUB_USERNAME / GITEA_USERNAME set
// (or who otherwise left those blank) were being locked out of the
// dashboard even though mirroring worked fine (see issue #271).
const isGitHubConfigured = !!configResponse?.githubConfig?.token;
// App private keys are redacted from the config response, so connected
// App sources count alongside a visible PAT for dashboard access.
const isGitHubConfigured = hasConfiguredSource(configResponse);
const isGiteaConfigured = !!(
configResponse?.giteaConfig?.url &&
@@ -158,13 +161,8 @@ export function useConfigStatus(): ConfigStatus {
userId: user.id
};
// Only token/url are actually required at runtime: the GitHub token is
// self-authenticating for listForAuthenticatedUser, and a Gitea username
// isn't needed under single-org / flat mirror strategies. Users who
// configure via env vars without GITHUB_USERNAME / GITEA_USERNAME set
// (or who otherwise left those blank) were being locked out of the
// dashboard even though mirroring worked fine (see issue #271).
const isGitHubConfigured = !!configResponse?.githubConfig?.token;
// Match the cached path: a redacted App source is still configured.
const isGitHubConfigured = hasConfiguredSource(configResponse);
const isGiteaConfigured = !!(
configResponse?.giteaConfig?.url &&