Skip to content

First-run GitHub App setup wizard

Public-safe

Available only while no GitHub App is configured — a live install cannot be rebound. Returns the token-entry form until SELFHOST_SETUP_TOKEN is presented, via the x-setup-token header or an authorization bearer; never a query parameter, which would leak the secret to access logs and browser history. In brokered mode (ORB_ENROLLMENT_SECRET set) it short-circuits to a brokered-mode page instead.

Responses

  • 200
    The token-entry form, or the setup page once authenticated
  • 400
    SELFHOST_SETUP_TOKEN or PUBLIC_API_ORIGIN is not configured
  • 403
    A setup token was supplied and did not match
Prometheus metrics for this self-hosted instanceSubmit the setup token from the wizard's form