Comment by carstonh

agreed… why can an ID token for a separate client application be used to read and write to GitHub? that’s the story here.