Resource not accessible by integration -- getting permissions to other organizations #1624
-
|
Hi! I'm developing a severless probot application and using octokit to make API requests. Ran into a problem with one of my API calls where I'm now receiving an error that says "Resource not accessible by integration". This is the full error: Here's what my code looks like // require the module getParam from ssm-handler
const { Octokit } = require("@octokit/core");
const { createAppAuth } = require("@octokit/auth-app");
/**
* This is the main entrypoint to your Probot app
* @param {import('probot').Probot} app
*
*
*/
async function checkForEmployee(user, octokit) {
console.log('checking for employee status')
let employeeStatus
console.log('trying to get the employee status result for...', user)
const result = await octokit.request('GET /orgs/{org}/teams/{team_slug}/memberships/{username}', {
org: 'github',
team_slug: 'employees',
username: user
})
console.log('print the result underneath!!!!!')
console.log(result)
console.log('the result should be printed above')
// if (result) {
// if (result.status === 204) {
// console.log("user is employee of github", result.status);
// employeeStatus = true;
// }
// }
// console.log('what is employee status', employeeStatus)
// return employeeStatus;
}
async function addUserToTeam(user, employeeStatus, octokit) {
const team_slug = employeeStatus ? 'github-employees' : 'members';
const result = await octokit.request('PUT /orgs/{org}/teams/{team_slug}/memberships/{username}', {
org: 'maintainers',
team_slug: team_slug,
username: user,
role: 'member'
}).catch(async (err) => {
if (err.status === 403) {
console.log(`Forbidden ${err.status}`)
}
if (err.status === 422) {
console.log(`Unprocessable Entity ${err.status}`);
}
}
);
if (result) {
if (result.status === 200) {
console.log("user added to team", result.status);
}
}
}
async function openIssue(user, octokit) {
console.log('opening issue')
const result = await octokit.request('POST /repos/{owner}/{repo}/issues', {
owner: 'maintainers',
repo: 'invite-automation',
labels: ['pending-invitation'],
title: `Pending invitation request for: @${user}`,
body: `Please take actions on adding the requested user to this repo:
- [ ] Assign this ticket to the correct user
- [ ] Confirm that @${user} should be added as a member
- [ ] Send an invite
*This issue body is just a placeholder and will change as this project grows*`,
}).catch(err => {
console.log('err', err)
if (err.status === 403) {
console.log(`Forbidden ${err.status}`)
}
if (err.status === 422) {
console.log(`Unprocessable Entity ${err.status}`);
}
}
);
if (result === 201) {
console.log("opened an issue", result);
}
}
async function assignTeams(user, octokit) {
const result = await octokit.request("GET /orgs/{org}/members/{username}", {
username: user,
org: "maintainers",
}).catch(async (err) => {
if (err.status === 404) {
console.log("user is not a team member but part of the org", err.status);
await openIssue(user, octokit);
}
});
if (result) {
if (result.status === 204) {
console.log("user is part of org", result);
await checkForEmployee(user, octokit);
// await addUserToTeam(user, employeeStatus, octokit);
}
if (result.status === 302) {
console.log("user is not part of org", result);
await openIssue(user, octokit);
}
}
}
module.exports = (app) => {
app.on("star", async (context) => {
const { appId, privateKey, clientSecret, clientId } = await require("./ssm-handler");
const octokit = new Octokit({
authStrategy: createAppAuth,
auth: {
appId: appId,
privateKey: privateKey,
clientId: clientId,
clientSecret: clientSecret,
installationId: context.payload.installation.id
},
});
app.log.info(`the user is ${context.payload.sender.login}`)
const user = context.payload.sender.login
app.log.info('opening an issue')
if (user) {
console.log('user is not null', user)
await assignTeams(user, octokit);
}
});
};The error is occurring in the function Adding more context ..I added a ton of permissions , but the one that matters here..I THINK is members. This api call works when I change the org name to the org that this GitHub app is installed in, but is there a way to get permissions for the GitHub App to make this call |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment 2 replies
-
You can retrieve an octokit instance authenticated as the app by doing this const appOctokit = app.auth()Once authenticated as the app, you can find out the installation ID for the org you are interested in https://docs.github.com/en/rest/reference/apps#get-an-organization-installation-for-the-authenticated-app
const { data: installation } = await appOctokit.request('GET /orgs/{org}/installation', {
org: 'myorg'
})With the const myOrgOctokit = app.auth(installation.id)Then use Can you give that a try? |
Beta Was this translation helpful? Give feedback.
-
|
thank you! let me try this out. |
Beta Was this translation helpful? Give feedback.
-
|
oh I forgot to mention, for this to work, probot has to be installed on the |
Beta Was this translation helpful? Give feedback.
You can retrieve an octokit instance authenticated as the app by doing this
Once authenticated as the app, you can find out the installation ID for the org you are interested in
With the
installationobject, you can create a new instance for that installation