Feature: Limit permissions for the extension to GitHub

[bdougie]

Type of feature

🍕 Feature

Current behavior

Suggested solution

By default these settings is marked for "all sites"

Additional context

No response

Code of Conduct

• I agree to follow this project's Code of Conduct

Contributing Docs

• I agree to follow this project's Contribution Docs

[bdougie]

@diivi this is not quite a good first issue until it provides the solution. https://opensauced.pizza/blog/good-first-issues-dont-exist

[diivi]

@Anush008 can the authentication really function without having access to websites other than GitHub? I tried changing the host_permissions, and couldn't log in anymore.

If so,

"host_permissions": ["https://github.com/*,"the_url_we_use_for_auth"]

[Anush008]

@diivi, we'll be needing "https://insights.opensauced.pizza/*" in the host_permissions array for the auth to work.

ai/src/constants.ts

Line 5 in 554bded

export const OPEN_SAUCED_INSIGHTS_DOMAIN = "insights.opensauced.pizza";

ai/src/utils/checkAuthentication.ts

Lines 10 to 14 in 554bded

	chrome.cookies.get(
	{
	name: SUPABASE_AUTH_COOKIE_NAME,
	url: `https://${OPEN_SAUCED_INSIGHTS_DOMAIN}`,
	},

The getter above won't return a value without access to https://insights.opensauced.pizza/* .