decaporg / decaporg/decap-cms

Decap not requesting necessary oAuth permissions from GitHub organization

Open
#7,026 1 comment 0 reactions 0 assignees View on GitHub
type: bug
Dominant language
JavaScript
Stars
19.4k
Forks
3.1k
Avg merge
1d 14h
Merged PRs (30d)
9

Description

**Describe the bug**

After adding Decap to my existing site by following the official instructions, using Netfliy & Netfliy Identity, I can access the admin interface just fine, but am unable to publish anything.

When I click "Save" on a blog post, I get the following error message:

> Failed to persist entry: API_ERROR: Although you appear to have the correct authorization credentials, the `drips-network` organization has enabled OAuth App access restrictions, meaning that data access to third-parties is limited. For more information on these restrictions, including how to enable this app, visit https://docs.github.com/articles/restricting-access-to-your-organization-s-data/

The GitHub docs article tells me to:

- Next to the organization, click Settings.
- In the "Third-party Access" section of the sidebar, click OAuth application policy.
- Next to the application you'd like to approve, click Review.
- After you review the information about the requested application, click Grant access.

Unfortunately, the OAuth application policy page only lists a few other (already-approved) oAuth apps, and an option to disable oAuth restrictions entirely, which is not an option for us.

It appears what's missing is Decap/Netlify somehow requesting the required write access to the repo? Maybe I just missed something, but I can't find any information on how to trigger such a request.

**To Reproduce**

1. Follow the official Decap guide on adding Decap to a new site hosted by a GitHub organization with oAuth restrictions enabled
2. Use Netflify Identity
3. Go to the admin interface
4. Post a new post or make an edit
5. See Error described above, with no way to request the required access level

**Expected behavior**
It should be able to make edits, supposedly after initially requesting the required oAuth access from GitHub.

**Applicable Versions:**

- Decap CMS version: decap-cms-app 3.0.12
- Git provider: GitHub (Organization)
- OS: macOS 14.0
- Browser version: Arc 1.19.1

**CMS configuration**
https://github.com/drips-network/app/blob/f7d48db5c39115035ecede9b78691b20e931e896/static/admin/config.yml

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.