Repository navigation
Dedicated authentication command #1413
Description
Example use:
gh auth --host github.com
As I see it, these would be its broader set of features:
-
triggers authentication for a specific GitHub host and caches credentials to
hosts.yml- supports Device Authorization Flow Additional or alternative authentication method #297 (comment)
- provide ability to paste in an authentication token obtained elsewhere
- nice-to-have: also configures your git credential handler
- nice-to-have: also configures your preferred git clone protocol for this host
-
verifies current credentials (either that from GITHUB_TOKEN or from
hosts.yml) -
offers way to re-auth No CTA after mistaken deletion of oauth access #627 How to switch user aka. logout and sign in? #887
- offer a way to ask for additional OAuth scopes (for Gist or
gh apipurposes)
- offer a way to ask for additional OAuth scopes (for Gist or
-
longer-term: support multiple logged-in accounts to the same host Allow multiple account credentials #326
Subcommands:
- login gh auth login #1445
- refresh gh auth refresh #1501
- status auth status #1495
- logout auth logout #1491
/cc @ampinsk
Activity
ampinsk commentedon Jul 27, 2020
Designs
gh auth login
gh auth logout
gh auth status
gh auth refresh
@vilmibm let me know if you need more input on the flags language, I'm cool with you taking a pass at it and I can give feedback!
mislav commentedon Jul 28, 2020
Re: “Login using the browser” prompt: I'm not sure if we give the user enough information to make a decision at this point; i.e. we don't present any alternatives to the user until they choose "no". Maybe it would be useful to present all possible options at once?
I think it's important for the user to understand that if they choose to not login using the browser, they need to already have an authentication token ready. They might expect that skipping the browser will prompt them for username+password on the command line (a la hub), but I would want us to somehow communicate that this mode of authentication is not available, even though it's frequently asked for.
Proposed flow:
@ampinsk What do you think?
vilmibm commentedon Jul 28, 2020
@mislav the same thing occurred to me and I went with this copy yesterday, thoughts?
mislav commentedon Jul 28, 2020
That looks great!
Nit: I don't think we need to say "OAuth" since that's an implementation detail.
ampinsk commentedon Jul 28, 2020
Yes thank you both for bringing this up, this is so much clearer 🙇♀️
The copy @mislav proposed above made a little more sense to me at a glance. I also really like the tip! 🤩