reduce required permissions for github auth (don't ask for private repos)

[samuelstroschein]

Problem

The OAuth flow requires permissions to all repositories, including private repositories.

The oauth implementation is simple at the moment. To avoid additional logic flows of "user has given access to this repo", the implementation naively requests permissions to all repositories. Users are reporting the desire to grant access on a finer level.

Proposal

Implement a "per repository" auth flow.

Additional information

Upvote this issue if you want this feature. This issue is not a priority at the moment. While a more fine-grained auth flow is nice to have, other features of the editor bring more value to a wider audience.

[felixhaeberle]

@NilsJacobsen @NiklasBuchfink This could be a potential drop-off of users because users don't want to open up their complete Github repository.

[NilsJacobsen]

This is not related to website makeover it would have been related to the editor.

Why not using a checkbox and call for access of public/ public and private repos?

[felixhaeberle]

Yes, just wanted to bring this up as an idea what causes the drop-off of users be less significant.

[samuelstroschein]

Why not using a checkbox and call for access of public/ public and private repos?

My reply from above: To avoid additional logic flows of "user has given access to this repo", the implementation naively requests permissions to all repositories.

The auth implementation becomes more complex because users need to re-authorize if they want to grant additional repositories permissions.

Yes, just wanted to bring this up as an idea what causes the drop-off of users be less significant.

@felixhaeberle Good point. We could take a look at the drop-off between "clicked on sign in" and actual sign in.

[mfranzs]

I opened a second github account with limited permissions to get around this issue 😅. So it's definitely adding a bit of fiction for us, and is preventing me from inviting more of our team as editors of our repo here. Just an FYI, thanks for Inlang!

[samuelstroschein]

I put a reduction of auth scopes on the roadmap https://github.com/orgs/inlang/projects/38/views/1?pane=issue&itemId=34669931!

Is everything else working as expected?

[mfranzs]

Thanks!

All good so far :)

[NiklasBuchfink]

We have reduced the required GitHub permissions to use the editor since #1466 has been merged.

Please give us feedback on the auth-flow on GitHub or in our Discord channel :)

[felixhaeberle]

Great 🤩