Support for GitHub's Fine-grained tokens.

[RiotNOR]

Feature request

Is your feature request related to a problem?

Currently, you cannot install private plugins/apps from GitHub repositories that use fine-grained tokens - only classic tokens are supported. This limits users who have moved to GitHub's recommended fine-grained token authentication system.

Describe the solution you'd like

1. Changing or adding support for the Authorization header format in the download_plugin_archive function to:

headers = {"Authorization": "Bearer {}".format(token)}

2. Using the GitHub API endpoint for downloads instead of the direct archive URL:

url = "https://api.github.com/repos/{user}/{repo}/zipball/{tag}"

This matches GitHub's current API requirements for fine-grained token authentication.

You can test yourself by mounting up "./posthog/posthog/plugins:/code/posthog/plugins" under volumes, and swapping out the old code at the top of download_plugin_archive with:

def download_plugin_archive(url: str, tag: Optional[str] = None) -> bytes:
    parsed_url = parse_url(url)
    headers = {}

    if parsed_url["type"] == "github":
        if not (tag or parsed_url.get("tag", None)):
            raise Exception("No GitHub tag given!")

        # Ensure the token is included in the Authorization header
        token = parsed_url["private_token"] or settings.GITHUB_TOKEN
        if token:
            headers = {"Authorization": "Bearer {}".format(token)}
        else:
            raise Exception("Missing GitHub private token!")

        # Construct the archive URL
        url = "https://api.github.com/repos/{user}/{repo}/zipball/{tag}".format(
            user=parsed_url["user"],
            repo=parsed_url["repo"],
            tag=tag or parsed_url["tag"],
        )

Would probably be a good idea to still support the old classic tokens, which I did not in the snippet above.

Describe alternatives you've considered

• Continue using classic tokens (not recommended as GitHub is moving away from them)
• Manually download and install plugins (cumbersome and defeats the purpose of the plugin system)