Commit Graph
2 Commits
Author SHA1 Message Date
Andy Dixon e744ebab1f Time out stalled GitHub clones after ten minutes
Progress streams now stay open until a job ends, so a hung clone would
otherwise hold its job and stream forever.
2026-04-04 11:53:50 +01:00
Andy Dixon b216b86004 Add GitHub App sign-in for private repositories
/api/github/login redirects to GitHub with a single-use state bound to
the session; the callback exchanges the code for a user token kept in
memory and expired with it. Clones pass the token through git config
in the environment, never the URL or arguments, and ignore host git
config and credential helpers. Failed clones report authRequired
(signin or install) so the frontend can offer the right next step.

Configured with GITHUB_CLIENT_ID, GITHUB_CLIENT_SECRET, GITHUB_APP_SLUG.
2026-02-28 12:27:34 +00:00