The Github Social Connection is passing access token as part of a query param

Help
,
1

We received a deprecation notice for authentication through our Github social connection.

On February 4th, 2020 at 11:32 (UTC) your application (XXXXX) used an access token (with the User-Agent Auth0 (http://auth0.com)) as part of a query parameter to access an endpoint through the GitHub API.

https://api.github.com/user/emails

Please use the Authorization HTTP header instead as using the access_token query parameter is deprecated.

Depending on your API usage, we’ll be sending you this email reminder once every 3 days for each token and User-Agent used in API calls made on your behalf.
Just one URL that was accessed with a token and User-Agent combination will be listed in the email reminder, not all.

Visit Deprecated APIs and authentication | GitHub Developer Guide for more information.

If there is anything we should be doing on our end let me know.

8 Likes
2

Just received the same email, wondering the same thing!

3

We received the exact same thing.
It seems that Auth0 github integration is passing an access token internally as a query param.

1 Like
4

I created an issue on their git repo for exactly this! :frowning:
https://github.com/auth0-extensions/auth0-deploy-extensions/issues/52

2 Likes
5

Thanks! I will ping repo maintainers regarding that!

2 Likes
6

We got this one today too. I have subscribed to the linked GitHub issue above.

7

+1 here. Please raise priority for the answer

1 Like
8

I already pinged the maintainers. Should reach out there soon!

9

+1 here. Do we have a solution in progress and an ETA?

10

Same here, prioritisation would be appreciated

11

Repinged them once again

2 Likes
12

It has been almost a month, Is there any update this issue ?

Thank you.

2 Likes
13

I hope Auth0 is still alive :smiley: haha… no update?

14

Hey there! As I can see Shawn replied 8 days ago that soon they will start working on the issue. Thanks for patience!

15

30+ day ping. Any update on this?

Thank you!

16

Hey there @brettski!

Can I ask you to ping Shawn in the issue by tagging him? Thank you!

17

Thanks. Though which Shawn? I don’t see a Shawn in this thread and there are more than 5 to choose from i the community.

18

Shawn Mclean (shawnmclean (Shawn Mclean) · GitHub) in the GitHub issue:

https://github.com/auth0-extensions/auth0-deploy-extensions/issues/52

19

Thanks @konrad.sopala. FYI, that is not in my view of this thread.

So what I am gathering here is that this thread in community.auth0.com is not really the place to track or look for any of this and actually the GitHub issue, Github integration is using deprecated Github APIs · Issue #52 · auth0-extensions/auth0-deploy-extensions · GitHub, is where we should be watching. Am I understanding this paradox correctly?