[Question] Which permissions need to be given for Github Personal Access Token?

[yqs112358]

I have generated a Fine-grained Github Personal Access Token with Public Repositories (read-only) repo access. However, when I was searching and adding a batch of apps from Github, I still faced with API request rate limit (need to retry 30 minutes later).

So... which permissions exactly need to be given for Github Personal Access Token to improve API request rate limit?🤔

[grm34]

the token should only need the minimal read access permission

See https://github.com/ImranR98/Obtainium/wiki#github

[yqs112358]

This seems to be correct I think...
So it's strange to see the limitations again 🤔 I remember that with personal access token the request rate limitation will be up to 100,000 times in an hour.

[grm34]

No it's not. You must use classic token with read:packages perm which allows to Download packages from GitHub Package Registry

[soredake]

@ImranR98 can information provided by @grm34 be documented on https://github.com/ImranR98/Obtainium/wiki#github page?

[Dev123456689]

I have generate a personal token (classic) with access to both read public repo and read packages but I am still facing the API request rate limit issue. What should I do?

[ImranR98]

Not sure what's going on here. I'm currently using a fine-grained token with no extra access:

[js12h]

I ran into this a few weeks ago. Try running this script and see what is returned. If your token is correct and accepted, it will show 5000.

Mine wasn't and I ended up creating a new Github account, using a real email address (instead of an alias like I normally do). Verified the email address w/ Github. Ran this command and it showed 5000. Don't know if my original email alias, even though authenticated, was causing the limit to stay low or if it was just an old account. Either way, I have been fine since I created a new account and verified the email address. The classic token works fine. I haven't tried the fine-grained token yet but will.

Note; w/ this script, you can use Bearer or Token:

curl -L
-H "Accept: application/vnd.github+json"
-H "Authorization: Bearer YOUR-TOKEN"
-H "X-GitHub-Api-Version: 2022-11-28"
https://api.github.com/rate_limit

[js12h]

Just tested the fine-grained token and verified it works as well. Though for now I will stick w/ the classic token.

Also, make sure you have validated/verified your email address w/ Github. I seem to recall reading somewhere that it needs to be verified to have the rate limit increased.

Hope this helps.

[ImranR98]

Thanks @js12h
Added a line to the Wiki: https://github.com/ImranR98/Obtainium/wiki#github

@yqs112358 please try those steps. We can re-open the issue if https://api.github.com/rate_limit shows you a high limit but Obtainium still gets rate limited.

[yqs112358]

Okay, I have tested the request and returned a correct result:

"rate": {
    "limit": 5000,
    "used": 2,
    "remaining": 4998,
    ...

BTW I haven't encountered rate limit again recently. It seems to be OK all the time. 😊
I will try to query this API in case I encounter it again in the future. Thanks so much!

[js12h]

Excellent. Glad to see everything is working well for you now.