Composer Update Fails due to Github Authorization

[fiatux]

During composer update I am asked for my github credentials repeatedly. What may be causing this?

An existing OAuth token for Composer is present and will be reused

Could not fetch https://api.github.com/authorizations, enter your GitHub credentials to go over the API >rate limit
The credentials will be swapped for an OAuth token stored in /Users/[USER]/.composer/auth.json, your >password will not be stored
To revoke access to this token you can visit https://github.com/settings/applications

Yes, I am entering my password correct, I have tried several different accounts and I can get authorization from Github if I use curl from cmdline.

[hkdobrev]

Possibly related to: https://developer.github.com/changes/2014-12-08-removing-authorizations-token/

[fiatux]

Not really, solved it by creating new token and adding it to the project's composer.json. I'm not sure why the valid token on /Users/[USER]/.composer/auth.json could not be used.

[fonsecas72]

I'm not sure why the valid token on /Users/[USER]/.composer/auth.json could not be used.

Maybe due to current user or COMPOSER_HOME environment variable at the time of the composer install being different of the expected?
I think I stumbled to something like that before.

[hamiltont]

solved it by creating new token and adding it to the project's composer.json

Could someone post the format of how to do this? I'm experiencing a similar problem and wish to solve it manually for the moment

[nmsobri]

Could someone post the format of how to do this? I'm experiencing a similar problem and wish to solve it manually for the moment

Yes, i want to know too

[fonsecas72]

You can solve it by creating a new github token to authenticate your composer requests.
You can do this two ways:

By defining your token globally:

composer config --global github-oauth.github.com <TOKEN>

Or by defining your token in a project composer.json:

{  
  "config": {
    "github-oauth": {
      "github.com": "<TOKEN>"
      }
    }
}

More information about the problem and how to generate github tokens:
Composer troubleshooting

[energysx]

hugofonseca thanks a lot!

[yoanisgil]

@hugofonseca Thanks!

[Commifreak]

The global Token config does not work (as mentiod in Post 3):

C:\Users\robin.kluth>composer diag
Checking platform settings: OK
Checking git settings: OK
Checking http connectivity: OK
Checking HTTP proxy: OK
Checking HTTP proxy support for request_fulluri: OK
Checking HTTPS proxy support for request_fulluri:
Could not fetch https://api.github.com/repos/Seldaek/jsonlint/zipball/1.0.0, ent
er your GitHub credentials to go over the API rate limit
The credentials will be swapped for an OAuth token stored in C:/Users/robin.klut
h/AppData/Roaming/Composer/auth.json, your password will not be stored
To revoke access to this token you can visit https://github.com/settings/applica
tions
Username:

while in %appdata%\Composer\auth.json:

{
    "http-basic": {},
    "github-oauth": {
        "github.com": "my_token"}
}

If I add the token to projects composer.json, it is working as expected.

[webdevilopers]

So the solution is to put the token into the composer.json directely instead of relying on the auth.json?

Will this be solved as suggested in the latest issue #3566 @Seldaek ?

Because as Malcolm Fell @emarref mentions:
If you're working on a collaborative project, you should not commit your key in the project source control. The alternative is to set your key in your home directory...
https://coderwall.com/p/kz4egw/composer-install-github-rate-limiting-work-around

[Commifreak]

Hi,

I figured out, that the auto-generated token (via composer) ist not accepted. If I create the key via GitHub's WebUI and replace the old one in composer.json, it is working.

[webdevilopers]

Have you tried that within the auth.json or config.json too?