When logging in with GitHub, it asks for the following permissions:

* Verify your GitHub identity

* Know which resources you can access

* Act on your behalf

What does the last one mean, and why is it needed?

That's just a misconfiguration of the GitHub app I haven't gone around to fix yet. We certainly don't act on your behalf, we only check basic information.

I had that issue too when building something w/ GitHub auth. Instead of making your app a GitHub App, make it an OAuth App (which should only ask for profile data).

Edit: see https://docs.github.com/en/free-pro-team@latest/developers/a...

That was it, all fixed now. Thanks for the suggestion :)

Blocking issue for me , btw great idea !

Thanks, I see. It's a blocking issue for me too.