Title: feat: Add repository-scoped token support to GithubAppClient by PhoebeMay · Pull Request #258 · spotify/github-java-client · GitHub
Open Graph Title: feat: Add repository-scoped token support to GithubAppClient by PhoebeMay · Pull Request #258 · spotify/github-java-client
X Title: feat: Add repository-scoped token support to GithubAppClient by PhoebeMay · Pull Request #258 · spotify/github-java-client
Description: Summary
Adds support for creating repository-scoped installation access tokens via the GitHub Apps API. This allows tokens to be
restricted to specific repositories instead of granting access to all repositories in an installation.
This is an implementation of https://docs.github.com/en/rest/apps/apps#create-an-installation-access-token-for-an-app
API Usage
// Create a scoped token for specific repositories
AccessTokenRequest request = ImmutableAccessTokenRequest.builder()
.repositoryIds(List.of(313604, 314195))
.build();
AccessToken token = appClient.getAccessToken(installationId, request).join();
// Or scope by repository name
AccessTokenRequest request = ImmutableAccessTokenRequest.builder()
.repositories(List.of("my-repo"))
.build();
Testing
Unit Tests
All existing tests pass, plus 3 new test cases:
✅ getAccessTokenWithoutScoping - Verifies backward compatibility (empty body)
✅ getAccessTokenWithRepositoryScoping - Verifies scoped token creation with both repositories and repository_ids
✅ getAccessTokenWithEmptyRequest - Verifies empty request serializes to {}
Manual Testing
Verified end-to-end with GitHub Enterprise Server:
Test 1: Unscoped Token (`Old Behavior)
Created token using existing getAccessToken(installationId) method
GithubAppClient appClient = client.createGithubAppClient();
AccessToken unscopedToken = appClient.getAccessToken(installationId).join();
Verification via GitHub API:
curl -H 'Authorization: Bearer
Open Graph Description: Summary Adds support for creating repository-scoped installation access tokens via the GitHub Apps API. This allows tokens to be restricted to specific repositories instead of granting access to al...
X Description: Summary Adds support for creating repository-scoped installation access tokens via the GitHub Apps API. This allows tokens to be restricted to specific repositories instead of granting access to al...
Opengraph URL: https://github.com/spotify/github-java-client/pull/258
X: @github
Domain: patch-diff.githubusercontent.com
| route-pattern | /:user_id/:repository/pull/:id/checks(.:format) |
| route-controller | pull_requests |
| route-action | checks |
| fetch-nonce | v2:105a80d2-1410-957d-9648-3113800be4f3 |
| current-catalog-service-hash | 87dc3bc62d9b466312751bfd5f889726f4f1337bdff4e8be7da7c93d6c00a25a |
| request-id | E396:10F66D:1F2FA4B:28C5F38:6976E001 |
| html-safe-nonce | 08ea3f6108f987a3eb6d4bbe981cff5ae312b746e254438ec65318e43009ab8f |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJFMzk2OjEwRjY2RDoxRjJGQTRCOjI4QzVGMzg6Njk3NkUwMDEiLCJ2aXNpdG9yX2lkIjoiNjMzMjYwNDg2Nzk1NjYyOTUwNiIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9 |
| visitor-hmac | 3afa322452db1699cac3677ce54f7bf8b5459b4d8db0c1ffb28d12062aa5bf83 |
| hovercard-subject-tag | pull_request:3068591226 |
| github-keyboard-shortcuts | repository,pull-request-list,pull-request-conversation,pull-request-files-changed,checks,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | / |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/spotify/github-java-client/pull/258/checks |
| twitter:image | https://avatars.githubusercontent.com/u/13728765?s=400&v=4 |
| twitter:card | summary_large_image |
| og:image | https://avatars.githubusercontent.com/u/13728765?s=400&v=4 |
| og:image:alt | Summary Adds support for creating repository-scoped installation access tokens via the GitHub Apps API. This allows tokens to be restricted to specific repositories instead of granting access to al... |
| og:site_name | GitHub |
| og:type | object |
| hostname | github.com |
| expected-hostname | github.com |
| None | 01d198479908d09a841b2febe8eb105a81af2af7d81830960fe0971e1f4adc09 |
| turbo-cache-control | no-preview |
| go-import | github.com/spotify/github-java-client git https://github.com/spotify/github-java-client.git |
| octolytics-dimension-user_id | 251374 |
| octolytics-dimension-user_login | spotify |
| octolytics-dimension-repository_id | 254401089 |
| octolytics-dimension-repository_nwo | spotify/github-java-client |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 254401089 |
| octolytics-dimension-repository_network_root_nwo | spotify/github-java-client |
| turbo-body-classes | logged-out env-production page-responsive full-width full-width-p-0 |
| disable-turbo | false |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | f752335dbbea672610081196a1998e39aec5e14b |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
Links:
Viewport: width=device-width