Clone repository using a Github app

[TheoBrigitte]

Select Topic Area

Question

Body

Hello,

How can I clone a git repository using git and authenticate via a Github app. I also need my authentication token to have no expiry set.

Here is what I have done so far:

1. Created a Github app with Repository > Contents permission
2. Installed the app within my organization
3. Generated a client secret via the app page

When I try to use git clone https://x-access-token:TOKEN@github.com/owner/repo.git to clone my repository, as describe here https://docs.github.com/en/apps/creating-github-apps/registering-a-github-app/choosing-permissions-for-a-github-app#choosing-permissions-for-git-access

I get the following error:

$ git clone 'https://x-access-token:my-client-secret-token@github.com/owner/repo.git'
Cloning into 'repo'...
remote: Invalid username or password.
fatal: Authentication failed for 'https://github.com/owner/repo.git/'

[hafizflow]

Correct way to clone using a GitHub App

Step 1 — Generate an Installation Access Token
A GitHub App must create a JWT, then exchange it for an installation access token:
Sign a JWT using your GitHub App’s private key

Call:
POST https://api.github.com/app/installations/:installation_id/access_tokens

You will receive a JSON response like:

{
  "token": "ghs_xxxxx",
  "expires_at": "2025-01-01T00:00:00Z"
}

This “token” is the only token that Git can use.

Step 2 — Clone using the installation token
Use:
git clone https://x-access-token:INSTALLATION_TOKEN@github.com/owner/repo.git

Example:
git clone https://x-access-token:ghs_123456789@github.com/my-org/my-repo.git

Why your command failed
You used:
x-access-token:my-client-secret-token

A client secret is never valid for Git, and GitHub will reject it as “Invalid username or password”.
If you need “no-expiry” authentication

Option A:
Run a script that auto-creates new installation tokens every hour (CI pipelines do this).

Option B (not recommended / insecure):
Use a Personal Access Token (classic) with never expires.

But this cannot be done for a GitHub App.