Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-26145

Narrow down github auth scope for user logins

XMLWordPrintable

      The latest version of the plugin is asking for too much permissions when the users are logging into a Jenkins instance using GitHub OAuth.

      I agree that the plugin needs this many permissions to access the various parts of a github's repository, but I believe the scope for user authentication can be narrowed down to username/email address.

      I believe it's just a matter of using the right scope for regular user authentication instead of the more broader scope that the plugin needs for "administrative" tasks.

      Please see https://github.com/saltstack/salt-jenkins/issues/61 for additional information of the permissions being asked to a regular user.

            sag47 Sam Gleske
            s0undt3ch Pedro Algarvio
            Votes:
            3 Vote for this issue
            Watchers:
            7 Start watching this issue

              Created:
              Updated:
              Resolved: