feat: add read-only GitHub App access alongside OAuth

src/core/model/anonymizedPullRequests/anonymizedPullRequests.schema.ts

@@ -1,3 +1,4 @@
+import { repositoryAccessSchema } from "../repository-access.schema";
 import { Schema } from "mongoose";
 
 const AnonymizedPullRequestSchema = new Schema({
@@ -15,6 +16,7 @@ const AnonymizedPullRequestSchema = new Schema({
   lastView: Date,
   pageView: Number,
   owner: { type: Schema.Types.ObjectId, index: true },
+  githubAccess: { type: repositoryAccessSchema, default: undefined },
   conference: String,
   source: {
     pullRequestId: Number,

src/core/model/anonymizedPullRequests/anonymizedPullRequests.types.ts

@@ -1,3 +1,4 @@
+import { RepositoryAccess } from "../../repository-access.types";
 import { Document, Model } from "mongoose";
 import { RepositoryStatus } from "../../types";
 
@@ -13,6 +14,7 @@ export interface IAnonymizedPullRequest {
     accessToken?: string;
   };
   owner: string;
+  githubAccess?: RepositoryAccess;
   conference: string;
   options: {
     terms: string[];

src/core/model/anonymizedRepositories/anonymizedRepositories.schema.ts

@@ -1,3 +1,4 @@
+import { repositoryAccessSchema } from "../repository-access.schema";
 import { Schema } from "mongoose";
 
 const AnonymizedRepositorySchema = new Schema({
@@ -31,6 +32,7 @@ const AnonymizedRepositorySchema = new Schema({
       addedAt: { type: Date, default: Date.now },
     },
   ],
+  githubAccess: { type: repositoryAccessSchema, default: undefined },
   conference: String,
   source: {
     type: { type: String },

src/core/model/anonymizedRepositories/anonymizedRepositories.types.ts

@@ -1,3 +1,4 @@
+import { RepositoryAccess } from "../../repository-access.types";
 import { Document, Model } from "mongoose";
 import { RepositoryStatus } from "../../types";
 
@@ -20,6 +21,7 @@ export interface IAnonymizedRepository {
     accessToken?: string;
   };
   owner: string;
+  githubAccess?: RepositoryAccess;
   coauthors?: {
     username: string;
     githubId?: string;

src/core/model/credentials/credentials.model.ts

@@ -6,6 +6,13 @@ export interface ICredential {
   provider: string;
   encryptedToken: EncryptedToken;
   updatedAt: Date;
+  encryptedRefreshToken?: EncryptedToken;
+  expiresAt?: Date;
+  refreshExpiresAt?: Date;
+  refreshLock?: string;
+  refreshLockUntil?: Date;
+  revision?: string;
+  revoked?: boolean;
 }
 const envelope = new Schema({
   version: { type: Number, required: true, enum: [1] },
@@ -16,9 +23,16 @@ const envelope = new Schema({
 }, { _id: false });
 const schema = new Schema<ICredential>({
   ownerId: { type: Schema.Types.ObjectId, required: true, ref: "user" },
-  provider: { type: String, required: true, enum: ["github"] },
+  provider: { type: String, required: true, enum: ["github", "github-app-user"] },
   encryptedToken: { type: envelope, required: true, select: false },
   updatedAt: { type: Date, required: true },
+  encryptedRefreshToken: { type: envelope, select: false },
+  expiresAt: Date,
+  refreshExpiresAt: Date,
+  refreshLock: { type: String, select: false },
+  refreshLockUntil: Date,
+  revision: String,
+  revoked: Boolean,
 }, { collection: "credentials" });
 schema.index({ ownerId: 1, provider: 1 }, { unique: true });
 export default model<ICredential>("Credential", schema);

src/core/model/github-installation.ts

@@ -0,0 +1,15 @@
+import { model, Schema } from "mongoose";
+
+const schema = new Schema({
+  appId: { type: String, required: true },
+  installationId: { type: Number, required: true },
+  accountId: Number,
+  accountLogin: String,
+  accountType: String,
+  blocked: { type: Boolean, default: false },
+  reconciliationPending: { type: Boolean, default: false },
+  checkedAt: Date,
+  revision: String,
+});
+schema.index({ appId: 1, installationId: 1 }, { unique: true });
+export default model("GitHubInstallation", schema);

src/core/model/repository-access.schema.ts

@@ -0,0 +1,8 @@
+import { Schema } from "mongoose";
+
+export const repositoryAccessSchema = new Schema({
+  kind: { type: String, enum: ["oauth", "github-app"], required: true },
+  repositoryId: Number,
+  installationId: Number,
+  revision: { type: String, required: true },
+}, { _id: false });