Authenticating with a GitHub App

You can authenticate as a GitHub App or as an installation.

You can authenticate as a GitHub App in order to generate an installation access token or manage your app.

You can make your GitHub App authenticate as an installation in order to make API requests that affect resources owned by the account where the app is installed.

You can manage private keys to authenticate with your GitHub App.

Learn how to create a JSON Web Token (JWT) to authenticate to certain REST API endpoints with your GitHub App.

Learn how to generate an installation access token for your GitHub App.

Your GitHub App can perform actions on behalf of a user, like creating an issue, creating a deployment, and using other supported endpoints.

To enforce regular token rotation and reduce the impact of a compromised token, you can configure your GitHub App to use expiring user access tokens.