René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"401 - A JSON web token could not be decoded when following App example","articleBody":"## Expected Behavior\r\n\r\nI am following the [example](https://docs.github.com/en/developers/apps/guides/using-the-github-api-in-your-app) of using GitHub API's in a GitHub app. This page links to [another page](https://docs.github.com/en/developers/apps/getting-started-with-apps/setting-up-your-development-environment-to-create-a-github-app) showing how to setup the development environment to do this. \r\nI followed the instructions on that page, with one difference, for testing, I kept the contents of the pem file in the code 64-encoded. The code then proceeds to decode that string to get the actual content of the pem file, and use that to construct the `PRIVATE_KEY`. So, it looks like this\r\n\r\n```\r\n  PRIVATE_KEY_ENCODED = \"some long string\"\r\n  PRIVATE_KEY_DECODED = (Base64.decode64(PRIVATE_KEY_ENCODED)).gsub('\\n', \"\\n\")\r\n  PRIVATE_KEY = OpenSSL::PKey::RSA.new(PRIVATE_KEY_DECODED)\r\n```\r\n\r\n## Actual Behavior\r\n\r\nWhen I install the GitHub app in a new organization, I the following error:\r\n`POST https://api.github.com/app/installations/27776345/access_tokens: 401 - A JSON web token could not be decoded // See: https://docs.github.com/rest (Octokit::Unauthorized)`.\r\n\r\nThis error occurs when the code tries to [get the token of a specific installation](https://github.com/github-developer/github-app-template/blob/master/template_server.rb#L117)\r\n`@installation_token = @app_client.create_app_installation_access_token(@installation_id)[:token]`\r\n\r\n## Steps to Reproduce\r\n\r\nFollow instructions in https://docs.github.com/en/developers/apps/getting-started-with-apps/setting-up-your-development-environment-to-create-a-github-app.\r\n\r\n## Context\r\n\r\nIn testing the code, in a Ruby console, I debugged the ran the template_server.rb file and placed a `binding.pry` right before [the error is thrown](https://github.com/github-developer/github-app-template/blob/master/template_server.rb#L117).\r\nI did the following:\r\n\r\n```\r\n# This is taken from https://github.com/github-developer/github-app-template/blob/master/template_server.rb#L94\r\n\r\npayload = {\r\n          # The time that this JWT was issued, _i.e._ now.\r\n          iat: Time.now.to_i,\r\n\r\n          # JWT expiration time (10 minute maximum)\r\n          exp: Time.now.to_i + (10 * 60),\r\n\r\n          # Your GitHub App's identifier number\r\n          iss: APP_IDENTIFIER\r\n      }\r\n\r\n# Calculate a jwt\r\njwt = JWT.encode(payload, PRIVATE_KEY, 'RS256')\r\n\r\n# display the installation id\r\n@installation_id\r\n```\r\n\r\nThen I ran the following cURL command in a command line.\r\n\r\ncurl -i -X POST \\\r\n-H \"Authorization: Bearer  \u003cjwt\u003e\" \\\r\n-H \"Accept: application/vnd.github+json\" \\\r\nhttps://api.github.com/app/installations/\u003c@installation_id\u003e/access_tokens\r\n\r\nI received a valid response that did include a token. So, it doesn't seem that the problem is in the code itself, but that for some reason the `Octokit::Client` is not doing the right thing in calling the intended API.\r\n\r\n","author":{"url":"https://github.com/hanysf","@type":"Person","name":"hanysf"},"datePublished":"2022-07-28T21:13:09.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":1},"url":"https://github.com/19/github-app-template/issues/19"}