v1.8.0

OAuth apps can create repositories and delete the account they signed in to

v1.8.0 adds two things an authorized app can do on your behalf. Both are off unless you approve them on the consent screen.

Creating repositories

An app that holds the repo:write scope can now create a repository through POST /api/v1/repos. Before, only the siGit apps could, so an authorized app had to ask you to create the repository by hand before it could push to it. Without the scope the request is refused with a 403 that names it.

Deleting your account from an app

DELETE /api/v1/me now accepts a token with the new account:delete scope, shown on the consent screen as "Permanently delete your siGit account". Only an app registered with that scope can ask for it.

An authorized app does not hold your smbCloud credential, so the removal uses the one kept from your last sign-in. If smbCloud no longer accepts it, nothing is deleted and the app is told to ask you to sign in again. Deleting an account now also removes the OAuth tokens and approvals it had granted.

Plan for internal and test accounts

Accounts used for internal and pre-release testing can now be put on a dedicated plan by hand, which gives them siGit Code Cloud access with a monthly allowance. It is not offered for sale.