Skip to content

Switching between personal and org repositories forces user to reauthorize github app #1315

@Rassl

Description

@Rassl

Problem
Currently using User OAuth tokens (ghu_...) which conflict when switching between personal and organization repositories. When authorizing for org repos, the personal repo token becomes invalid, and vice versa.
Root cause: OAuth flow creates user-scoped tokens. GitHub treats each authorization as the same user re-authorizing the same app, invalidating the previous token.

Personal repos → User Token A (ghu_zNgl...) ✅
Org repos → User Token B (ghu_jLu1...) → Token A invalidated ❌

Possible Solution
Switch to Installation Access Tokens (ghs_...) which are installation-scoped, not user-scoped. Each installation (personal, org) gets its own independent token.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions