-
Notifications
You must be signed in to change notification settings - Fork 1.4k
Enterprise authentication not supported by ACP server #3161
Copy link
Copy link
Open
Labels
area:authenticationLogin, OAuth, device auth, token management, and keychain integrationLogin, OAuth, device auth, token management, and keychain integrationarea:enterpriseGitHub Enterprise (GHE/GHES) support, org policies, and enterprise settingsGitHub Enterprise (GHE/GHES) support, org policies, and enterprise settingsarea:non-interactiveNon-interactive mode (-p), CI/CD, ACP protocol, and headless automationNon-interactive mode (-p), CI/CD, ACP protocol, and headless automation
Metadata
Metadata
Assignees
Labels
area:authenticationLogin, OAuth, device auth, token management, and keychain integrationLogin, OAuth, device auth, token management, and keychain integrationarea:enterpriseGitHub Enterprise (GHE/GHES) support, org policies, and enterprise settingsGitHub Enterprise (GHE/GHES) support, org policies, and enterprise settingsarea:non-interactiveNon-interactive mode (-p), CI/CD, ACP protocol, and headless automationNon-interactive mode (-p), CI/CD, ACP protocol, and headless automation
Type
Fields
Give feedbackNo fields configured for Bug.
Describe the bug
Enterprise users cannot authenticate ACP clients with the copilot ACP server. To authenticate as a GHE user using the copilot CLI natively, users must either:
copilot login --host https://example.ghe.com; orcopilotthen run the/logincommand and specify the domain.However, the copilot ACP server does not reveal either of these possibilities in the
terminal-authvalue of the ACP initialization response:{"jsonrpc":"2.0","id":0,"result":{"protocolVersion":1,"agentCapabilities":{"loadSession":true,"mcpCapabilities":{"http":true,"sse":true},"promptCapabilities":{"image":true,"audio":false,"embeddedContext":true},"sessionCapabilities":{"list":{}}},"agentInfo":{"name":"Copilot","title":"Copilot","version":"1.0.42"},"authMethods":[{"id":"copilot-login","name":"Log in with Copilot CLI","description":"Run `copilot login` in the terminal","_meta":{"terminal-auth":{"command":"/Users/<me>/.local/bin/copilot","args":["login"],"label":"Copilot Login"}}}]}}Please add support for enterprise users trying to authenticate their ACP clients.
Affected version
GitHub Copilot CLI 1.0.42.
Steps to reproduce the behavior
copilot loginand the usual github.com login flow.Expected behavior
Enterprise users should be able to log in with ACP clients. I can see two potential solutions:
GH_HOSTorCOPILOT_GH_HOSTenv vars, if set, during theterminal-authflow.GH_TOKENandCOPILOT_GH_TOKENfor this purpose.Additional context
No response