Help with using accessToken in Octokit

[lokmanm]

Hey everyone

I added the Github access token to my session with the following code:

  callbacks: {
    async jwt(token, user, account, profile, isNewUser) {
      // Add access_token to the token right after signin
      if (account?.accessToken) {
        token.accessToken = account.accessToken
        token.username = profile.login
      }

      return token
    },

    async session(session, token) {
      // Add property to session, like an access_token from a provider.
      session.accessToken = token.accessToken
      session.user.username = token.username

      return session
    },
  },

But now whenever I try to use the octokit for an authorized API call I get a 404.

Example code:

  const session = await getSession({ req });

  const octokit = new Octokit({
    auth: session.accessToken
  });


  const { data } = await octokit.request("GET /orgs/{org}/issues", {
    org: 'private-repo-here',
    filter: 'assigned',
    state: 'open',
  });

Has anyone had a similar issue ? I tried a lot of combinations but I cant get it to work. Thanks

[balazsorban44]

404 means you are request a resource from a wrong url. I'm not familiar with octokit, but try to re-verify if you are using the correct url again. sorry if that is obvious, I don't have a better suggestion at the moment

[balazsorban44]

Strange, if it is an auth reason, it really should be something like 401 as a response...

But did you add the correct scopes to the GitHub provider?

[lokmanm]

This is how my nextauth file looks like. Signin and retrieving user info works just fine.

import NextAuth from 'next-auth'
import Providers from 'next-auth/providers'

export default NextAuth({
  providers: [
    Providers.GitHub({
      clientId: process.env.GITHUB_ID,
      clientSecret: process.env.GITHUB_SECRET,
    }),
  ],
  callbacks: {
    async jwt(token, user, account, profile, isNewUser) {
      // Add access_token to the token right after signin
      if (account?.accessToken) {
        token.accessToken = account.accessToken
        token.username = profile.login
      }

      return token
    },

    async session(session, token) {
      // Add property to session, like an access_token from a provider.
      session.accessToken = token.accessToken
      session.user.username = token.username

      return session
    },
  },
})

[balazsorban44]

Yes, could you make sure that you have all the needed scopes for GitHub and the action you are trying to do?

By default, it is only user

https://github.com/nextauthjs/next-auth/blob/main/src/providers/github.js

[lokmanm]

Yep that one was it, sorry I had no idea an option like that exists. Spent the whole day looking at the documentation but missed this one.

Thanks a ton !

[balazsorban44]

Cheers! Yeah, I think we should make it more obvious that all the options in a custom provider CAN be extended on the built-in ones as well. Once you understand it it's so powerful!