Skip to content

Non PAT auth method #132

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
aSapien opened this issue Apr 6, 2025 · 1 comment
Open

Non PAT auth method #132

aSapien opened this issue Apr 6, 2025 · 1 comment
Labels
enhancement New feature or request

Comments

@aSapien
Copy link

aSapien commented Apr 6, 2025

Describe the feature or problem you’d like to solve

PATs are long lived credentials that are discouraged, and sometimes entirely restricted in many organizations. This limits the organizations from taking advantage of this MCP server.

Proposed solution

Please provide an alternative Auth method, e.g an OAuth with a device_code, in addition to the PAT, to enhance security and enable adoption within the aforementioned organizations.

Additional context

Example Github App auth: https://docs.github.com/en/apps/creating-github-apps/writing-code-for-a-github-app/building-a-cli-with-a-github-app

@aSapien aSapien added the enhancement New feature or request label Apr 6, 2025
@PravinKamble123
Copy link

Hey folks! 👋 I'd love to take a stab at implementing the OAuth 2.0 device code flow as an alternative to PATs.

My plan:

  • Integrate GitHub OAuth using the device_code grant
  • Ensure it works cleanly with the current CLI setup
  • Add documentation for setup and usage

Let me know if this is something you're open to having in a PR! 🙂

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants