Composer Update Fails due to Github Authorization

[fiatux]

During composer update I am asked for my github credentials repeatedly. What may be causing this?

An existing OAuth token for Composer is present and will be reused

Could not fetch https://api.github.com/authorizations, enter your GitHub credentials to go over the API >rate limit
The credentials will be swapped for an OAuth token stored in /Users/[USER]/.composer/auth.json, your >password will not be stored
To revoke access to this token you can visit https://github.com/settings/applications

Yes, I am entering my password correct, I have tried several different accounts and I can get authorization from Github if I use curl from cmdline.

[hkdobrev]

Possibly related to: https://developer.github.com/changes/2014-12-08-removing-authorizations-token/

[fiatux]

Not really, solved it by creating new token and adding it to the project's composer.json. I'm not sure why the valid token on /Users/[USER]/.composer/auth.json could not be used.

[fonsecas72]

I'm not sure why the valid token on /Users/[USER]/.composer/auth.json could not be used.

Maybe due to current user or COMPOSER_HOME environment variable at the time of the composer install being different of the expected?
I think I stumbled to something like that before.

[hamiltont]

solved it by creating new token and adding it to the project's composer.json

Could someone post the format of how to do this? I'm experiencing a similar problem and wish to solve it manually for the moment

[nmsobri]

Could someone post the format of how to do this? I'm experiencing a similar problem and wish to solve it manually for the moment

Yes, i want to know too

[fonsecas72]

You can solve it by creating a new github token to authenticate your composer requests.
You can do this two ways:

By defining your token globally:

composer config --global github-oauth.github.com <TOKEN>

Or by defining your token in a project composer.json:

{  
  "config": {
    "github-oauth": {
      "github.com": "<TOKEN>"
      }
    }
}

More information about the problem and how to generate github tokens:
Composer troubleshooting

[energysx]

hugofonseca thanks a lot!

[yoanisgil]

@hugofonseca Thanks!

[Commifreak]

The global Token config does not work (as mentiod in Post 3):

C:\Users\robin.kluth>composer diag
Checking platform settings: OK
Checking git settings: OK
Checking http connectivity: OK
Checking HTTP proxy: OK
Checking HTTP proxy support for request_fulluri: OK
Checking HTTPS proxy support for request_fulluri:
Could not fetch https://api.github.com/repos/Seldaek/jsonlint/zipball/1.0.0, ent
er your GitHub credentials to go over the API rate limit
The credentials will be swapped for an OAuth token stored in C:/Users/robin.klut
h/AppData/Roaming/Composer/auth.json, your password will not be stored
To revoke access to this token you can visit https://github.com/settings/applica
tions
Username:

while in %appdata%\Composer\auth.json:

{
    "http-basic": {},
    "github-oauth": {
        "github.com": "my_token"}
}

If I add the token to projects composer.json, it is working as expected.

[webdevilopers]

So the solution is to put the token into the composer.json directely instead of relying on the auth.json?

Will this be solved as suggested in the latest issue #3566 @Seldaek ?

Because as Malcolm Fell @emarref mentions:
If you're working on a collaborative project, you should not commit your key in the project source control. The alternative is to set your key in your home directory...
https://coderwall.com/p/kz4egw/composer-install-github-rate-limiting-work-around

[Commifreak]

Hi,

I figured out, that the auto-generated token (via composer) ist not accepted. If I create the key via GitHub's WebUI and replace the old one in composer.json, it is working.

[webdevilopers]

Have you tried that within the auth.json or config.json too?

[midan888]

I generated new token on Gtihub and pasted this in ocmposer json of the project and it worked, thanks to hugofonseca
{ "config": { "github-oauth": { "github.com": "<TOKEN>" } } }

[webdevilopers]

Ok, so the important point is that the token has to be added to the `composer.json' file.

The attempt with auth.son of Composer is no longer supported by the curernt GitHub API:
#3566

[webdevilopers]

It looks like @Seldaek added a fix for the original issue by @fiatux :
#3651

[informaticosgb]

Gracias fonsecas72, funciona :D

composer clear-cache

composer global require "fxp/composer-asset-plugin:1.0.0-beta4"

composer config --global github-oauth.github.com "my_token"

composer create-project --prefer-dist yiisoft/yii2-app-advanced yii-application

Así me funcionó para Yii2 Advanced Template.

[Peter74]

Hi I was face same problem.
Solution for me was:

composer config --global github-oauth.github.com <TOKEN>

thanks @fonsecas72
...and as a result of it was writing token at auth.json :

{  
  "config": {
    "github-oauth": {
      "github.com": "<TOKEN>"
      }
    }
}

...but not in composer.json - that was just mistake in explanation, but if you run

composer config --global github-oauth.github.com <TOKEN>

• you will be OK.

[marcozs84]

Posted by codekman at

http://www.yiiframework.com/forum/index.php/topic/60340-issue-while-installing-yii-2/

Please see the line above the cmd, here you will find the url and visit this url and you will git the token and paste the token.

• it worked for me at least

[o5]

Is possible to remove auth token via composer config -g command? I mean something like composer config -g --unset repositories.foo but for auth.json.

Sure, I can remove by fe jg but build-in support in composer should be cool.

[Seldaek]

This will do it for example: composer config --global --auth --unset github-oauth.github.com

[breakline87]

Can you guys make something which works without extensive modifications even for a beginner?

[congson95dev]

solved by use this cmd: composer config --global --auth github-oauth.github.com
for example : composer config --global --auth github-oauth.github.com 123456

[alenux]

solution :
just add in composer.json

"config": {
"process-timeout": 1800,
"fxp-asset": {
"enabled": false
}
},

[ew5yte5ye]

If you are facing Github token error then open composer.json file and paste below code

"github-oauth": {
"github.com": ""
}

into

"config": {
"preferred-install": "dist",
"sort-packages": true,
"optimize-autoloader": true,
"github-oauth": {
"github.com": ""
}
}

And then update composer

composer update

If you don't have Github token then first login to github.com and generate token and use ablove steps.

[mijaelsaban]

The issue is that my token it has an underscore which is never valid according to this logic.

Which here it fails.

 
foreach ($githubOauth as $domain => $token) {
            if (!preg_match('{^[.a-z0-9]+$}', $token)) {
                throw new \UnexpectedValueException('Your github oauth token for '.$domain.' contains invalid characters: "'.$token.'"');
            }
            $this->checkAndSetAuthentication($domain, $token, 'x-oauth-basic');
        }

[Seldaek]

@mijaelsaban make sure you update Composer to the latest version before reporting error, this was fixed last week.

[Boby]

I am running on composer 2 and having this issue, anyway we can remove it make it just ask for auth again? as I am running in docker and cant get it cleaned up

[b-hayes]

yeah, I ran into this on composer 2 as well . Have to manually update the token to the auth.json

[PuffPastry]

This issue just appeared again, was using version 2.0.8 when it happened.

Updated composer using composer self-update to version 2.1.9 but the issue persisted.

Previously set token had expiry date of Sun, Dec 5 2021. Regenerating the token solved the issue.

[Loukili-Rachid]

the solution is here : https://stackoverflow.com/questions/31766546/composer-error-with-github-oauth-token-on-fresh-laravel-homestead-provision/72911657#72911657

[MrAnassBaba]

Otherwise run this command composer diagnose to checking composer status.
And check recommendation alert, finally Updated composer using composer using composer self-update

[skdishansachin]

@fonsecas72 thanks a lot.

[OCHIENGHerman]

You can solve it by creating a new github token to authenticate your composer requests. You can do this two ways:

By defining your token globally:

composer config --global github-oauth.github.com <TOKEN>

Or by defining your token in a project composer.json:

{  
  "config": {
    "github-oauth": {
      "github.com": "<TOKEN>"
      }
    }
}

More information about the problem and how to generate github tokens: Composer troubleshooting

[OCHIENGHerman]

Thanks it worked.