From 1d326e7c3236340d4486b8a219ae09e6c8a08d5a Mon Sep 17 00:00:00 2001 From: Thomas Durieux <5577568+tdurieux@users.noreply.github.com> Date: Sun, 11 Oct 2026 13:13:02 +0200 Subject: [PATCH] fix: repair private repository access from the edit page (#892) * fix: repair private repository access from the edit page * fix: respect App rollout and reload renamed sources after repair * fix: gate access repair by status and update response tests --- docs/github-app-setup.md | 8 ++++ public/asset-manifest.json | 2 +- public/partials/anonymize.htm | 7 +++ public/script/app.js | 33 ++++++++++++++ public/script/vendor.min.js | 38 ++++++++-------- src/server/routes/github-app.ts | 2 +- test/app-reinstall-recovery.test.js | 2 +- test/github-app.test.js | 44 ++++++++++++++++++- test/vue-ui.test.js | 67 +++++++++++++++++++++++++++++ 9 files changed, 180 insertions(+), 23 deletions(-) diff --git a/docs/github-app-setup.md b/docs/github-app-setup.md index daf9599..0aa41e2 100644 --- a/docs/github-app-setup.md +++ b/docs/github-app-setup.md @@ -108,6 +108,14 @@ Public reads use a [repository-scoped App user token](https://docs.github.com/en Each API request renews through its own repository binding, rechecking identity and public visibility while keeping the same user quota. Existing installation bindings retain their installation checks. + +If a previously public source becomes private, its existing public-only binding +continues to reject private reads. Select the repository in the App installation, +then open the anonymization's Edit page and click **Repair GitHub access**. This +verifies installation access to the same GitHub repository ID and published commit +before replacing the binding. It preserves the anonymous URL, snapshot and settings. +Signing in again alone does not change a resource's binding. The Connections page +also provides **Reconnect read-only access** for this purpose. This uses GitHub's documented [public resource access for App user tokens](https://docs.github.com/en/apps/creating-github-apps/registering-a-github-app/choosing-permissions-for-a-github-app). The explicit **Use existing OAuth access** choice handles repositories not yet diff --git a/public/asset-manifest.json b/public/asset-manifest.json index a6bd5da..1c45c44 100644 --- a/public/asset-manifest.json +++ b/public/asset-manifest.json @@ -1,6 +1,6 @@ { "core.min.js": "core.3b07189932.min.js", - "vendor.min.js": "vendor.c091cfcbfd.min.js", + "vendor.min.js": "vendor.0ae693973a.min.js", "mermaid.min.js": "mermaid.f848a72d16.min.js", "all.min.css": "all.904f999bac.min.css", "markdown.min.js": "markdown.44f2e93820.min.js", diff --git a/public/partials/anonymize.htm b/public/partials/anonymize.htm index 3322e2d..de40112 100644 --- a/public/partials/anonymize.htm +++ b/public/partials/anonymize.htm @@ -119,6 +119,13 @@
Select repositories on GitHub, then return here. Selected content will be published, including content from private repositories.
+ +