Connect Git providers with OAuth

To enable the experimental feature that forces a refresh of the personal access token on workspace startup in Eclipse Che, modify the Custom Resource configuration as follows:

spec:
  components:
    cheServer:
      extraProperties:
        CHE_FORCE_REFRESH_PERSONAL_ACCESS_TOKEN: "true"

You can configure OAuth between Che and Git providers, enabling users to work with remote Git repositories:

Refresh an expired access token automatically

Refresh expired access tokens automatically on workspace startup so that developers do not encounter authentication failures caused by stale personal access tokens.

This is an experimental feature.
Prerequisites

  • An active kubectl session with administrative permissions to the destination Kubernetes cluster. See Overview of kubectl.

Procedure

  1. Modify the CheCluster Custom Resource to enable forced token refresh:

    spec:
  components:
    cheServer:
      extraProperties:
        CHE_FORCE_REFRESH_PERSONAL_ACCESS_TOKEN: "true"
Verification

  • Start a new workspace and verify that the personal access token is refreshed by checking the Che server logs.

Additional resources