GH-AUTH-REFRESH(1)

NAME

gh-auth-refresh - Refresh stored authentication credentials

SYNOPSIS

gh auth refresh [flags]

DESCRIPTION

Expand or fix the permission scopes for stored credentials.

The --scopes flag accepts a comma separated list of scopes you want your gh credentials to have. If no scopes are provided, the command maintains previously added scopes.

The --remove-scopes flag accepts a comma separated list of scopes you want to remove from your gh credentials. Scope removal is idempotent. The minimum set of scopes ("repo", "read:org" and "gist") cannot be removed.

The --reset-scopes flag resets the scopes for your gh credentials to the default set of scopes for your auth flow.

OPTIONS

-h, --hostname <string>
    The GitHub host to use for authentication

--insecure-storage
    Save authentication credentials in plain text instead of credential store

-r, --remove-scopes <strings>
    Authentication scopes to remove from gh

--reset-scopes
    Reset authentication scopes to the default minimum set of scopes

-s, --scopes <strings>
    Additional authentication scopes for gh to have

EXAMPLE

    $ gh auth refresh --scopes write:org,read:public_key
    # => open a browser to add write:org and read:public_key scopes
    $ gh auth refresh
    # => open a browser to ensure your authentication credentials have the correct minimum scopes
    $ gh auth refresh --remove-scopes delete_repo
    # => open a browser to idempotently remove the delete_repo scope
    $ gh auth refresh --reset-scopes
    # => open a browser to re-authenticate with the default minimum scopes

SEE ALSO

gh-auth(1)