Skip to content

Commit 1377243

Browse files
authored
Enhance content on installation access tokens for GitHub Apps
Expanded the explanation of installation access tokens, emphasizing their short-lived nature and scope inheritance from the associated GitHub App.
1 parent ffd71be commit 1377243

1 file changed

Lines changed: 7 additions & 1 deletion

File tree

content/apps/creating-github-apps/authenticating-with-a-github-app/generating-an-installation-access-token-for-a-github-app.md

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,13 @@ category:
1212

1313
## About installation access tokens
1414

15-
In order to authenticate as an app installation, you must generate an installation access token. For more information about authenticating as an app installation, see [Authenticating as a GitHub App installation](/apps/creating-github-apps/authenticating-with-a-github-app/authenticating-as-a-github-app-installation).
15+
In order to authenticate as an app installation, you must generate an installation access token. Installation access tokens are short-lived tokens whose scope is inherited from their associated Github App. These permissions can be further pared down per use case.
16+
17+
When you use an installation access token, it acts on behalf of the associated Github App. In other words, it is not tied to a user (as is the case with [personal access tokens](https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/managing-your-personal-access-tokens#about-personal-access-tokens)).
18+
19+
For more information regarding installation access tokens and about authenticating as an app installation, see [Authenticating as a GitHub App installation](/apps/creating-github-apps/authenticating-with-a-github-app/authenticating-as-a-github-app-installation).
20+
21+
Installation access tokens are short-lived tokens whose scope is inherited from their associated Github App. These permissions can be further pared down per use case.
1622

1723
> [!NOTE]
1824
> Instead of generating an installation access token, you can use {% data variables.product.company_short %}'s Octokit SDKs to authenticate as an app. The SDK will take care of generating an installation access token for you and will regenerate the token once it expires. For more information about authenticating as an app installation, see [Authenticating as a GitHub App installation](/apps/creating-github-apps/authenticating-with-a-github-app/authenticating-as-a-github-app-installation).

0 commit comments

Comments
 (0)