Skip to main content

Authentication

GitFig uses GitHub OAuth to securely access your repositories. This guide walks you through the authentication process.

Time: 2 minutes Difficulty: Beginner

How It Works

GitFig uses GitHub's Device Flow for authentication. This means:

  • You authorize GitFig on GitHub's website (not in the plugin)
  • Your credentials never pass through GitFig
  • You can revoke access anytime from GitHub settings

Sign In Steps

1. Click "Sign in with GitHub"

When you first open GitFig, you'll see the authentication screen. Click "Sign in with GitHub" to start.

2. Copy the Device Code

GitFig will display a device code (e.g., ABCD-1234). This code is shown for a limited time (usually 15 minutes).

3. Enter Code on GitHub

  1. Click "Open GitHub" or go to github.com/login/device
  2. Enter the device code
  3. Click "Continue"

4. Authorize GitFig

Review the permissions and click "Authorize". GitFig requests these permissions:

  • repo - Read/write access to repositories
  • user:email - Read your email address

5. Return to Figma

After authorization, GitFig automatically detects it and shows the main interface.

Troubleshooting

"Authorization pending" message won't go away

  • Make sure you completed authorization on GitHub
  • Check that you authorized the correct GitHub account
  • Try clicking "Sign in with GitHub" again to get a new code

"Session expired" error

Device codes expire after 15 minutes. Click "Sign in with GitHub" to get a new code.

Wrong GitHub account

  1. Go to github.com/settings/applications
  2. Find "GitFig" and click "Revoke"
  3. Sign in again with the correct account

Sign Out

To sign out of GitFig:

  1. Open GitFig in any Figma file
  2. Click the settings icon (⚙️) in the top right
  3. Click "Sign Out"

Your token is removed from Figma's secure storage.

Security

  • Tokens are stored in Figma's encrypted clientStorage
  • Tokens are never sent to GitFig's servers (except for OAuth exchange)
  • You can revoke access anytime from GitHub Settings

Next Steps

Now that you're authenticated, follow the Quick Start Guide to sync your first repository.