3 people 7b84162ae9 feat(github-app): App credentials, installation tokens, and a Select repo picker (#621) ...

* feat(github-app): App credentials, installation tokens, and a Select repo picker

RoboCo was 100% PAT-based. A singleton Fernet-encrypted github_app_credentials
row (migration 077, telegram-credentials pattern) now stores the App id +
private key; github_app_auth mints RS256 app JWTs and caches installation
tokens until 5 minutes before expiry. Projects can bind an installation
(projects.github_installation_id): get_decrypted_token returns a minted
installation token for bound projects and falls back to the stored PAT on
any minting failure, so all ten token consumers work unchanged.

CEO-gated routes expose credentials CRUD plus installation/repo listing, and
the New Project dialog gains a Select repo picker (disabled with a HelpTip
until the App is configured) that fills the git URL and binds the
installation; manual URL + PAT stays the default path.

* test(panel): mock the GitHub App credentials card in the settings page test

---------

Co-authored-by: Renn F <rennf93@users.noreply.github.com>

2026-07-21 00:54:20 +02:00

..

versions

feat(github-app): App credentials, installation tokens, and a Select repo picker (#621)

2026-07-21 00:54:20 +02:00

env.py

Linting: Check

2025-12-12 02:45:47 +01:00

script.py.mako

Initial implementation

2025-12-10 02:49:54 +01:00