GitHub App Redirection Issue with ChatGPT Plugin Authentication

GPT builders Plugins / Actions builders
, , ,
1

Hello everyone,

I am developing a ChatGPT plugin that uses a GitHub App for authentication. The flow of the plugin is as follows:

  1. The user installs the plugin on ChatGPT.
  2. The user is redirected to https://dev-duet-ai.vercel.app/api/auth
  3. My auth.js redirects to https://github.com/apps/devduetai/installations/new
  4. After the user has accepted the permissions, the user is redirected to https://chat.openai.com/aip/plugin-my_plugin_id/oauth/callback
  5. The plugin is then successfully installed and ChatGPT calls my /token endpoint to get an access token.

However, step 4 never happens if the user has already installed the GitHub App before. Instead it takes them to the installation page and never continues the flow. I thought maybe I could check if the user has already installed it, but in step 3 I have no user information. Is there a better way to handle the redirect or tell the flow to continue?

Thanks!

Here is some documentation I’ve been referencing:

Here is the repo I’m working on:

2

I just realized I think I’ve been doing this wrong and I shouldn’t use https://github.com/apps/devduetai/installations/new and instead need to use https://github.com/login/oauth/authorize

3

Since I have not created a plugin using any form of auth I will not try to hallucinate an answer.

However this should be of value to you.

shane.isbell created

Plugin Store Manifest and Spec Files now in Github

which contains copies of actual manifest and OAS (Open API specification) files and as we know is where the use of GitHub tokens would be indicated.

Using GitHub search for github results is some hits (12) but this one is of interest.

image

:slightly_smiling_face:

Yes I actually used a recent reply with a bit of a modification; what can I say, the best programmers in the world are some of the laziest (think before acting) people I know.

2 Likes
4

Thanks for the reply. The problem with this is it does not enable the user to select the specific repos the app should have access to. When I use https://github.com/apps/devduetai/installations/new then the user has the option to only allow the plugin access to certain repos, which is what I prefer to enable. But if the user uninstalls the plugin without uninstalling the GitHub App, and then later re-installs the plugin, they cannot finish the auth flow because going to https://github.com/apps/devduetai/installations/new takes them to a page to modify the plugin. If they don’t want to do anything, there’s no way to redirect back to openai to finish the auth flow.

Right now the only workaround I can think of is to tell the users if they uninstall the ChatGPT plugin, they have to uninstall the GitHub App to reinstall the plugin. Then maybe my /auth endpoint could have this information with a dialog that says “Did you uninstall the plugin?”