How does the oauth flow work?

[MoSattler]

How does the oauth flow work?

[gr2m]

You can use https://github.com/octokit/oauth-auth.js https://github.com/octokit/oauth-app.js for a full SDK to create a server with all necessary APIs for the OAuth flows. See the routes at https://github.com/octokit/oauth-app.js#middlewares

Does that work for you?

There is also https://github.com/octokit/app.js which builds upon https://github.com/octokit/oauth-app.js, but also includes APIs specific to GitHub Apps

[MoSattler]

You can use https://github.com/octokit/oauth-auth.js for a full SDK to create a server with all necessary APIs for the OAuth flows.

Hi @gr2m, thank you for your help! The link does not seem to work for me, I get a 404.

[gr2m]

Sorry! I meant https://github.com/octokit/oauth-app.js

[MoSattler]

Thank you very much @gr2m, this is very helpful!

[MoSattler]

@gr2m just to clarify - the linked repos help me setting up the oauth flow for a GitHub App (not an Oauth App), correct?
For my use case it is important to act on behalf an organization, not a user.

[gr2m]

the linked repos help me setting up the oauth flow for a GitHub App (not an Oauth App), correct

• GitHub App SDK: https://github.com/octokit/app.js/
• OAuth App SDK: https://github.com/octokit/oauth-app.js/

For my use case it is important to act on behalf an organization, not a user.

An organization cannot be an actor to e.g. create a comment. Only user accounts and GitHub Apps can be actors.

What exactly are you trying to build?

[MoSattler]

Ok, thank you! I got a bit confused by OAUth apps vs GItHub Apps with OAuth.
I need to list the members of an organization, hence the need for a GitHub App.

Thank you very much!