Support fine-grained tokens

[spenserblack]

Here are some notes on fine-grained token support

[jcbhmr]

I'd like to note that currently

actions-wiki/action.yml

Line 33 in 98f0591

git remote add origin https://${{ inputs.token }}@${{ inputs.repository }}.wiki.git

you use the https://TOKEN@github.com/user/repo format, when it should be https://USER:TOKEN@github.com/user/repo for constructing the auth URL so that the TOKEN part is in the password slot of the user:password auth thing. https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/creating-a-personal-access-token#using-a-personal-access-token-on-the-command-line

Once you have a token, you can enter it instead of your password when performing Git operations over HTTPS.

For example, on the command line you would enter the following:

$ git clone https://github.com/USERNAME/REPO.git
Username: YOUR_USERNAME
Password: YOUR_TOKEN

in this case, I think you can use $GITHUB_ACTOR to use the current trigger-er user as the username. That's what I think is best practice (I vaguely remember seeing that pattern used before) but I can't point to a specific "best practice because $X does it this way" on this. The alternative is GITHUB_REPOSITORY_OWNER which doesn't seem as semantically correct but idk.

---

this could be the cause of some of the confusion in #1 ??? maybe? idk. particularily this though jumps out as a misconfig with the user/pass thing

the error makes sense that "cant find password" would mean that it literally cant find the password since its in the username slot misplaced...

[jcbhmr]

ref #22 with related discussion about dummy user https://x:$TOKEN@github.com/user/repo.git working

[jcbhmr]

heres my (admittedly imcomplete) writeup of the github token madness: https://github.com/Andrew-Chen-Wang/github-wiki-action/blob/jcbhmr/wiki/Home.md

[spenserblack]

Looks like the link is invalid. Could you find a permalink?

[jcbhmr]

whoops! I merged the jcbhmr branch stuff into the main branch and then deleted it. Oopsies for spreading bad links. https://github.com/Andrew-Chen-Wang/github-wiki-action/wiki