My goal is to be able to list and access private repositories of a user.

我的目标是能够列出和访问用户的私有存储库。

For this, I've set up a GitHub App to perform some tasks as an app. I have also enabled the OAuth capability of my app. I want to make clear that this is a GitHub App with OAuth capabilities, not an OAuth App itself.

为此，我设置了一个GitHub应用程序来执行一些应用程序的任务。我还启用了我的应用程序的OAuth功能。我想澄清的是，这是一个具有OAuth功能的GitHub应用程序，而不是OAuth应用程序本身。

In the registered callback, I obtain an installation_id that allows me to execute actions on behalf of the app. Additionally, I receive a code which I then exchange for a valid authorization key to execute actions on behalf of the user.

在注册的回调中，我获得了一个安装ID，它允许我代表应用程序执行操作。此外，我还会收到一个代码，然后将其交换为有效的授权密钥，以代表用户执行操作。

Despite my attempts to request all repositories using either the installation ID or the authorization code, I'm only able to access public repositories. It appears that private repositories can only be accessed through a Personal Access Token (PAT) or, maybe a dedicated OAuth App. Am I missing something?

尽管我尝试使用安装ID或授权码请求所有存储库，但我只能访问公共存储库。私人存储库似乎只能通过个人访问令牌(PAT)或专用的OAuth应用程序访问。我是不是遗漏了什么？

Listing accessible repos as an app is a two step process:

将可访问的回购作为应用程序列出是一个分两步进行的过程：

1. Get an Installation Access Token from https://api.github.com/app/installations/{installation_id}/access_tokens, authenticating as the App (Bearer authorization, and a JWT signed by the App Private Key. The Installation Access Token expires 1 hour after issuance.

   
   



2. Use the Installation Access Token as Bearer authorization token to query one of the available API endpoints, such as /installation/repositories

   
   

You won't be able to list the user's private repositories, but only those he granted your app access to. The that list of repos may include some private repositories, but the app will not have access to private repos it was not granted access to.

您不能列出用户的私人存储库，但只能列出他授予您的应用程序访问权限的存储库。Repos列表可能包括一些私人存储库，但该应用程序将无法访问它未被授予访问权限的私人Repos。

You can access the repos themselves as an app for clone/fetch/etc using an url like "https://x-access-token:{intallation_access_token}@{reponame}".

您可以使用像“https://x-access-token：{intallation_access_token}@{reponame}”.这样的URL将Repos本身作为应用程序进行克隆/获取等访问