From 6b2a1a0da8a65419908492d8fcfe8ed577f8b2bc Mon Sep 17 00:00:00 2001 From: Konstantin Haase Date: Wed, 24 Apr 2013 16:47:52 +0200 Subject: [PATCH] do not use client credentials for /auth/github --- lib/travis/api/app/endpoint/authorization.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/travis/api/app/endpoint/authorization.rb b/lib/travis/api/app/endpoint/authorization.rb index eb5a1e57..f433cfc1 100644 --- a/lib/travis/api/app/endpoint/authorization.rb +++ b/lib/travis/api/app/endpoint/authorization.rb @@ -218,7 +218,7 @@ class Travis::Api::App end def user_for_github_token(token, drop_token = false) - data = GH.with(token: token.to_s) { GH['user'] } + data = GH.with(token: token.to_s, client_id: nil) { GH['user'] } scopes = parse_scopes data.headers['x-oauth-scopes'] halt 403, 'insufficient access: %p' unless acceptable? scopes