decaporg / decaporg/decap-cms

PKCE for GitHub

Open
#6,597 2 comments 3 reactions 0 assignees View on GitHub
area: auth area: extensions/backends/github type: feature
Dominant language
JavaScript
Stars
19.4k
Forks
3.1k
Avg merge
1d 14h
Merged PRs (30d)
9

Description

**Is your feature request related to a problem? Please describe.**
Currently in order to use GitHub as a backend, you need to run a separate server to facilitate the authentication: https://www.netlifycms.org/docs/github-backend/

Running a separate server is not required for GitLab because it supports PKCE: https://www.netlifycms.org/docs/gitlab-backend/

It would be great if we could do the same for GitHub, so I'm trying to gain attention and drum up support for GitHub to implement this.

**Describe the solution you'd like**
I've opened a discussion on GitHub, but it would help to get more community support. Please consider up-voting, liking, and commenting on the thread if this is something you'd like to see as well: https://github.com/orgs/community/discussions/15752

**Describe alternatives you've considered**
The alternative is to run your own [external oauth client](https://www.netlifycms.org/docs/external-oauth-clients/), but one of the main advantages of running a Jamstack site with a git-backed CMS is not having to run a server, so IMO this defeats the purpose.

**Additional context**
Other projects that this could be relevant for are [TinaCMS](https://github.com/tinacms/tinacms) and my project [Plenti](https://github.com/plentico/plenti)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.