An error "RepositoryToken is invalid..." occurs when creating a static web app about vscode-azurestaticwebapps

[alexweininger]

As stated in the issue description this only reproduces when connected to a GitHub CodeSpace in a browser. I'm able to consistently reproduce this error.

In my investigation, I found that the type of token returned to the extension by the built-in VS Code GitHub authentication provider is different on browser CodeSpaces than it is everywhere else.

In a browser connected to a CodeSpace we receive "GitHub App user-to-server tokens" (prefixed with ghu_). In all other places I tested, we receive "OAuth access tokens" (prefixed by gho_) ¹. The user-to-server tokens are created by GitHub Apps, whereas OAuth tokens are created by OAuth apps ².

ghu tokens have their own set of scopes different from gho tokens. I discovered that ghu tokens require the actions scope for workflow related REST API endpoints ³. Adding the actions scope to our requested scopes does fix the issue, but what happens is this makes the GitHub authentication provider return a gho token. So an easy fix is to just request an additional scope outside of the default ghu token so that we get a gho token.

Footnotes

1. GitHub authentication token formats: https://github.blog/2021-04-05-behind-githubs-new-authentication-token-formats/ ↩

2. Differences between GitHub Apps and OAuth apps https://docs.github.com/en/apps/oauth-apps/building-oauth-apps/differences-between-github-apps-and-oauth-apps ↩

3. https://docs.github.com/en/rest/actions/workflow-jobs?apiVersion=2022-11-28#about-workflow-jobs-in-github-actions ↩

[Kizito007]

I'm having the same issue. Any progress with this?

[Kizito007]

I'm having the same issue. Any progress with this?

So apparently this error happened on my browser. So when I moved the codespace to Vs Code desktop it worked fine.

[alexweininger]

Upstream issue: microsoft/vscode#185915