From 07108253bc67fa6cac7ded606521729e49e9d6cf Mon Sep 17 00:00:00 2001 From: Gerhard Preuss Date: Sat, 9 Apr 2016 13:29:16 +0200 Subject: [PATCH] require public keys --- lib/models/user.js | 2 +- lib/server.js | 2 +- views/user.jade | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/lib/models/user.js b/lib/models/user.js index 1244e18..a136419 100644 --- a/lib/models/user.js +++ b/lib/models/user.js @@ -158,7 +158,7 @@ userSchema.methods.hasRequiredGitHubAccess = function (done) { done(err) return } - var requiredScopes = [ 'user:email', 'write:repo_hook', 'read:org', 'repo' ] + var requiredScopes = [ 'user:email', 'write:repo_hook', 'read:org' ] var ok = requiredScopes.reduce(function (result, scope) { return result && scopes.indexOf(scope) > -1 }, true) diff --git a/lib/server.js b/lib/server.js index c4bf2be..b732368 100755 --- a/lib/server.js +++ b/lib/server.js @@ -84,7 +84,7 @@ var init = function (port, initDone) { app.use(slash()) router.get('/auth/github', - passport.authenticate('github', { scope: [ 'user:email', 'write:repo_hook', 'read:org', 'repo' ] }), + passport.authenticate('github', { scope: ['user:email', 'write:repo_hook', 'read:org'] }), routes.authGithub.bind(routes)) router.get('/auth/github/callback', diff --git a/views/user.jade b/views/user.jade index 07da864..de69161 100644 --- a/views/user.jade +++ b/views/user.jade @@ -31,7 +31,7 @@ block content .content if owner.needsReauth == 'more-rights' .header Sorry, Doclets needs more permissions. - p Doclets needs permissions to create webhooks, read organization membership and read private repositories (Private Repo Support coming soon). However, Doclets will never make changes to any repository content. + p Doclets needs permissions to create webhooks, read organization membership and read public repositories (Private Repo Support coming soon). However, Doclets will never make changes to any repository content. else .header Sorry, your GitHub authentication token seems invalid. p This can have different reasons. Please re-authenticate next. No added repositories or Doclets will be lost.