Repository navigation
feat(oauth): add authenticator to existing api key endpoints - #40246
Merged
Merged
Conversation
![greptile-apps[bot]](https://avatars.githubusercontent.com/in/867647?s=60&v=4){kind=small}
joshsny
commented
Oct 23, 2025
Piccirello
approved these changes
Oct 23, 2025
joshsny
enabled auto-merge (squash)
October 23, 2025 20:32
Contributor
|
Size Change: 0 B Total Size: 3.31 MB ℹ️ View Unchanged
|
joshsny
disabled auto-merge
October 23, 2025 21:09
jonathanlab
approved these changes
Oct 24, 2025
…b.com/posthog/posthog into oauth/add-authenticators-to-endpoints
joshsny
enabled auto-merge (squash)
October 24, 2025 15:14
MarconLP
added a commit
that referenced
this pull request
Apr 29, 2026
PR #38921 narrowed the integrations endpoint to only return GitHub integrations when authenticated via personal API key (and #40246 extended the same restriction to OAuth access tokens). The intent was to scope the surface to GitHub for the Tasks product, but the side effect was that any other tool authenticating via API key — MCP, future products, custom scripts — could no longer read Slack, Stripe, Hubspot, or any other integration kind despite holding the `integration:read` scope. Drop the kind filter so the endpoint returns whatever the scope permission grants. The serializer already excludes `sensitive_config`, so this change exposes the same metadata-only view (id, kind, config, created_at, errors, display_name) for all kinds rather than just github. Per #38921 (comment).
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This adds OAuth to existing endpoints that explicitly specify authenticators.
It also fixes an issue where access tokens are treated as personal api keys if a personal api key authenticator comes first