Skip to content
rainxchzed edited this page Jan 4, 2026 · 2 revisions

❓ Why does this app ask for GitHub login?

This app uses GitHub’s official OAuth Device Flow to authenticate users. Authentication is required only to increase GitHub API rate limits and ensure the app works reliably.

🔒 Security & Privacy

  • You always log in directly on github.com
  • This app never sees your password
  • I do not get access to your GitHub account
  • Each user receives their own GitHub-issued token
  • Tokens are stored locally on your device
  • You can revoke access anytime from GitHub settings

The authorization page may show my GitHub username because the OAuth app is registered under my account — this does NOT mean my account gains access to yours.

🚦 Why authentication is necessary

GitHub enforces strict API limits:

  • Unauthenticated: 60 requests per hour
  • Authenticated: ~5000 requests per hour (per user)

This app needs to:

  • discover repositories
  • check releases
  • verify installer assets Without authentication, the app would hit rate limits very quickly and fail to function properly.

🔑 Why not use a personal access token?

OAuth is safer and recommended because:

  • no manual token copying
  • limited scopes
  • easy revocation
  • no shared or global tokens

Clone this wiki locally