feat: pass auth token instead of installation id

package.json

@@ -29,6 +29,7 @@
     "open-source"
   ],
   "dependencies": {
+    "@octokit/auth-app": "^6.0.3",
     "@octokit/webhooks": "^12.0.10",
     "@octokit/webhooks-types": "^7.3.1",
     "@sinclair/typebox": "^0.32.5",

src/github/github-event-handler.ts

@@ -1,6 +1,7 @@
 import { EmitterWebhookEvent, Webhooks } from "@octokit/webhooks";
 import { customOctokit } from "./github-client";
 import { GitHubContext, SimplifiedContext } from "./github-context";
+import { createAppAuth } from "@octokit/auth-app";
 
 export type Options = {
   webhookSecret: string;
@@ -68,4 +69,13 @@ export class GitHubEventHandler {
       },
     });
   }
+
+  async getToken(installationId: number) {
+    const auth = createAppAuth({
+      appId: this._appId,
+      privateKey: this._privateKey,
+    });
+    const token = await auth({ type: "installation", installationId });
+    return token.token;
+  }
 }

src/github/handlers/index.ts

@@ -31,6 +31,11 @@ async function handleEvent(event: EmitterWebhookEvent, eventHandler: InstanceTyp
     return;
   }
 
+  if (!("installation" in event.payload) || event.payload.installation?.id === undefined) {
+    console.log("No installation found");
+    return;
+  }
+
   const handler = config.handlers.events[context.key];
 
   if (handler.length === 0) {
@@ -41,12 +46,8 @@ async function handleEvent(event: EmitterWebhookEvent, eventHandler: InstanceTyp
   for (const { workflow, settings } of handler) {
     console.log(`Calling handler for event ${event.name} and workflow ${workflow}`);
 
-    let installationId: string | undefined = undefined;
-    if ("installation" in event.payload && event.payload.installation?.id !== undefined) {
-      installationId = event.payload.installation.id.toString();
-    }
-
-    const inputs = new DelegatedComputeInputs(context.key, event, settings, installationId);
+    const token = await eventHandler.getToken(event.payload.installation.id);
+    const inputs = new DelegatedComputeInputs(context.key, event, settings, token);
 
     await dispatchWorkflow(context, {
       owner: workflow.owner,
@@ -62,21 +63,21 @@ class DelegatedComputeInputs<T extends EmitterWebhookEventName = EmitterWebhookE
   public eventName: T;
   public event: EmitterWebhookEvent<T>;
   public settings: unknown;
-  public installationId?: string;
+  public authToken: string;
 
-  constructor(eventName: T, event: EmitterWebhookEvent<T>, settings: unknown, installationId?: string) {
+  constructor(eventName: T, event: EmitterWebhookEvent<T>, settings: unknown, authToken: string) {
     this.eventName = eventName;
     this.event = event;
     this.settings = settings;
-    this.installationId = installationId;
+    this.authToken = authToken;
   }
 
   public getInputs() {
     return {
       eventName: this.eventName,
       event: JSON.stringify(this.event),
       settings: JSON.stringify(this.settings),
-      installationId: this.installationId ?? "",
+      authToken: this.authToken.toString(),
     };
   }
 }