Skip to main content

Authentication

GitFig uses GitHub OAuth to securely access your repositories. This guide walks you through the authentication process.

Time: 2 minutes Difficulty: Beginner

How It Works​

GitFig uses GitHub's Device Flow for authentication. This means:

  • You authorize GitFig on GitHub's website (not in the plugin)
  • Your credentials never pass through GitFig
  • You can revoke access anytime from GitHub settings

Sign In Steps​

1. Click "Sign in with GitHub"​

When you first open GitFig, you'll see the authentication screen:

Sign In Button

Click "Sign in with GitHub" to start.

2. Copy the Device Code​

GitFig will display a device code (e.g., ABCD-1234):

Device Code Screen

This code is shown for a limited time (usually 15 minutes).

3. Enter Code on GitHub​

  1. Click "Open GitHub" or go to github.com/login/device
  2. Enter the device code
  3. Click "Continue"

GitHub Device Code Entry

4. Authorize GitFig​

Review the permissions and click "Authorize":

GitHub Authorization Screen

GitFig requests these permissions:

  • repo - Read/write access to repositories
  • user:email - Read your email address

5. Return to Figma​

After authorization, GitFig automatically detects it and shows the main interface:

Authenticated State

Troubleshooting​

"Authorization pending" message won't go away​

  • Make sure you completed authorization on GitHub
  • Check that you authorized the correct GitHub account
  • Try clicking "Sign in with GitHub" again to get a new code

"Session expired" error​

Device codes expire after 15 minutes. Click "Sign in with GitHub" to get a new code.

Wrong GitHub account​

  1. Go to github.com/settings/applications
  2. Find "GitFig" and click "Revoke"
  3. Sign in again with the correct account

Sign Out​

To sign out of GitFig:

  1. Open GitFig in any Figma file
  2. Click the settings icon (⚙️) in the top right
  3. Click "Sign Out"

Your token is removed from Figma's secure storage.

Security​

  • Tokens are stored in Figma's encrypted clientStorage
  • Tokens are never sent to GitFig's servers (except for OAuth exchange)
  • You can revoke access anytime from GitHub Settings

Next Steps​

Now that you're authenticated, follow the Quick Start Guide to sync your first repository.