Use GitHub Apps to handle authentication and authorization

[O5ten]

Is your feature request related to a problem? Please describe.

I want the user experience of using a GITHUB_ACCESS_TOKEN in that i don't have to actively login. I also want to have a higher amount of requests per hour.

Personal Access Tokens: 5,000 requests/hour.
GitHub Actions GITHUB_TOKEN: 1,000 requests/hour per repository.
GitHub Apps: 5,000-15,000 requests/hour (scales with repos/users)

Describe the solution you'd like
I'd like to be able to feed the application with a clientId and a clientSecret and have it fetch its own short-lived token which then performs authentication towards github. In turn I can also use what repositories the github app installation has access to govern what REPO_NAMES to use because you can get that info from github directly.

https://docs.github.com/en/rest/apps/installations?apiVersion=2022-11-28#list-repositories-accessible-to-the-app-installation

Describe alternatives you've considered
OAuth doesn't really do it for me because that requires an actual user account to authenticate while github apps don't. GitHub access token doesn't do it for me either, because there is a quite low limit to the amount of requests per hour and it has access to all or nothing for classic tokens.

Additional context
I am willing to work on this on my own. :)

[sumanmaity112]

Hi @O5ten,
Gitaction board supports github OAuth2 login out of box, please have a look into https://github.com/otto-de/gitactionboard/blob/main/USAGE.md#configurations:~:text=60-,GITHUB_OAUTH2_CLIENT_ID,no,-BASIC_AUTH_USER_DETAILS_FILE_PATH

[O5ten]

It does not work for my usecase.

Having OAuth makes it impossible for me to have it wrapped in a Grafana iframe-panel withou signing in every now and then, since it is a client-side authentication-flow. A personal access token (That allows me to sign in anonymously) locks an access token to my name and has a low request per second.

A GitHub Apps may authenticate and create its own short-lived tokens completely without involving a user auth-flow and keeping the application authenticated to the github api and any private organization.

Like i mentioned before, i want to put this dashboard inside of another dashboard rotation and find github apps to be the most appealing auth option.