Method githubConnect

admin/server/github.go:531–561

githubConnect starts an installation flow of the Github App. It's implemented as a non-gRPC endpoint mounted directly on /github/connect. It redirects the user to Github to authorize Rill to access one or more repositories. After the Github flow completes, the user is redirected back to githubConnec

(w http.ResponseWriter, r *http.Request)

// It redirects the user to Github to authorize Rill to access one or more repositories.
// After the Github flow completes, the user is redirected back to githubConnectCallback.
func (s *Server) githubConnect(w http.ResponseWriter, r *http.Request) {
	// Check the request is made by an authenticated user
	claims := auth.GetClaims(r.Context())
	if claims.OwnerType() != auth.OwnerTypeUser {
		// redirect to the auth site, with a redirect back to here after successful auth.
		s.redirectLogin(w, r)
		return
	}

	query := r.URL.Query()

	remote := query.Get("remote") // May not be set
	redirect, err := url.QueryUnescape(query.Get("redirect"))
	if err != nil {
		http.Error(w, fmt.Sprintf("failed to unescape redirect param: %s", err.Error()), http.StatusInternalServerError)
		return
	}
	// Ignore escape error, param will be omitted.

	// Redirect to Github App for installation
	redirectURL, err := s.githubAppInstallationURL(githubConnectState{
		Remote:   remote,
		Redirect: redirect,
	})
	if err != nil {
		http.Error(w, fmt.Sprintf("failed to create redirect url: %s", err.Error()), http.StatusInternalServerError)
		return
	}

	http.Redirect(w, r, redirectURL, http.StatusTemporaryRedirect)
}

// githubConnectCallback is called after a Github App authorization flow initiated by githubConnect has completed.
// This call can originate from users who are not logged in in cases like admin user accepting installation request, removing existing installation etc.