@taskcluster/client 105.0.0 → 106.0.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@taskcluster/client",
-  "version": "105.0.0",
+  "version": "106.0.0",
   "author": "Jonas Finnemann Jensen <jopsen@gmail.com>",
   "description": "Client for interfacing taskcluster components",
   "license": "MPL-2.0",

package/src/apis.js

@@ -605,6 +605,33 @@ export default {
           "title": "Get Temporary GCP Credentials",
           "type": "function"
         },
+        {
+          "args": [
+            "appName",
+            "owner"
+          ],
+          "category": "Github Credentials",
+          "description": "Get a Github application installation token scoped to the given repositories\nand permissions, using the configured app `appName`.\n\nRequesting `<permission>: <level>` on `<owner>/<repo>` requires the scope\n`auth:github-repo-token:<appName>/<owner>/<repo>:<permission>:<level>`.\nLevels and permissions are matched exactly to github token permissions\nwhich can be found at\nhttps://docs.github.com/en/rest/apps/apps?apiVersion=2026-03-10#create-an-installation-access-token-for-an-app.\nWhile token access is widened (requesting a write token will give a read+write one)\nscopes are not. Holding `:contents:write` alone only allows requesting a `write` token.\nBoth owner and repo must be in lowercase in the scope.\n\nThe token expires after an hour but this behavior is github dependent.\nYou should read the `expires` property from the response if you intend\nto maintain active credentials in your task.",
+          "input": "v1/github-repo-token-request.json#",
+          "method": "post",
+          "name": "githubRepoToken",
+          "output": "v1/github-token-response.json#",
+          "query": [
+          ],
+          "route": "/github/<appName>/<owner>/repo-token",
+          "scopes": {
+            "AllOf": [
+              {
+                "each": "auth:github-repo-token:<appName>/<owner>/<repoPerm>",
+                "for": "repoPerm",
+                "in": "repoPerms"
+              }
+            ]
+          },
+          "stability": "experimental",
+          "title": "Get a repository scoped github token",
+          "type": "function"
+        },
         {
           "args": [
           ],

package/src/client.js

@@ -247,6 +247,10 @@ export const createClient = (reference, name) => {
       throw new Error('options.randomizationFactor must be between 0 and 1!');
     }
 
+    if (this._options.authorizedScopes != null && !Array.isArray(this._options.authorizedScopes)) {
+      throw new Error('options.authorizedScopes must be an array of scopes');
+    }
+
     if (this._options.agent) {
       // We have explicit options for new agent create one...
       this._httpAgent = {
@@ -286,7 +290,7 @@ export const createClient = (reference, name) => {
 
       // If set of authorized scopes is provided, we'll restrict the request
       // to only use these scopes
-      if (Array.isArray(this._options.authorizedScopes)) {
+      if (this._options.authorizedScopes) {
         ext.authorizedScopes = this._options.authorizedScopes;
       }