Check PAT privileges prior to logging in.

.changeset/flat-colts-enjoy.md

@@ -0,0 +1,7 @@
+---
+'gov4git-desktop-app': patch
+---
+
+Check PAT privileges prior to logging in.
+
+- Addresses #39, #40, and gov4git/gov4git#133

src/electron/services/ConfigService.ts

@@ -333,6 +333,14 @@ export class ConfigService extends AbstractConfigService {
     const errors: string[] = []
     const user = config.user!
 
+    const scopes = await this.gitService.getOAuthScopes(user.pat)
+    if (!scopes.includes('repo')) {
+      errors.push(
+        'Personal Access Token has insufficient privileges. Please ensure PAT has rights to top-level repo scope.',
+      )
+      return errors
+    }
+
     if (!(await this.gitService.doesUserExist(user as GitUserInfo))) {
       errors.push(`Invalid user credentials`)
     }

src/electron/services/GitService.ts

@@ -36,6 +36,17 @@ export class GitService {
     }
   }
 
+  public getOAuthScopes = async (token: string): Promise<string[]> => {
+    const response = await fetch(`${this.apiBaseUrl}`, {
+      method: 'GET',
+      headers: {
+        Authorization: `Token ${token}`,
+      },
+    })
+    const scopes = (response.headers.get('X-OAuth-Scopes') ?? '').split(', ')
+    return scopes
+  }
+
   protected throwIfUserDoesNotExist = async (
     user: GitUserInfo,
     from: string,

src/renderer/src/components/SettingsForm.tsx

@@ -3,10 +3,10 @@
   Card,
   Field,
   Input,
   Label,
   LabelProps,
 } from '@fluentui/react-components'
 import { InfoLabel } from '@fluentui/react-components/unstable'
 import { useAtom, useAtomValue } from 'jotai'
 import { FC, FormEvent, useCallback, useEffect, useState } from 'react'
 import { useNavigate } from 'react-router-dom'
@@ -73,6 +73,7 @@
           eventBus.emit('user-logged-in')
         }
       } catch (ex) {
+        setLoading(false)
         await catchError(`Failed to save config. ${ex}`)
       }
     },
@@ -123,7 +124,7 @@
           className={styles.field}
           // @ts-expect-error children signature
           label={{
             children: (_: unknown, slotProps: LabelProps) => (
               <label htmlFor="PAT" className={styles.labelText}>
                 Personal Access Token
               </label>
@@ -143,7 +144,7 @@
           className={styles.field}
           // @ts-expect-error children signature
           label={{
             children: (_: unknown, slotProps: LabelProps) => (
               <label htmlFor="communityRepoUrl" className={styles.labelText}>
                 Community URL
               </label>