fix(docs): use classic GitHub token for content

Author: tannerlinsley

src/utils/documents.server.ts

@@ -652,15 +652,14 @@ function getValidGitHubToken(token: string | undefined) {
   return trimmedToken
 }
 
-function getGitHubContentAuthToken() {
-  return (
-    getValidGitHubToken(env.GITHUB_CONTENT_TOKEN) ??
-    getValidGitHubToken(env.GITHUB_AUTH_TOKEN)
-  )
+function getGitHubAuthToken() {
+  return getValidGitHubToken(env.GITHUB_AUTH_TOKEN)
 }
 
 export function isGitHubAuthFailureStatus(status: number) {
-  return status === 401 || status === 403
+  // GitHub can mask token-scoping failures as 404, especially for raw
+  // content URLs. Retry unauthenticated before treating the content as missing.
+  return status === 401 || status === 403 || status === 404
 }
 
 export function getGitHubContentFetchOptions(opts?: {
@@ -678,7 +677,7 @@ export function getGitHubContentFetchOptions(opts?: {
     headers['User-Agent'] = opts.userAgent
   }
 
-  const token = getGitHubContentAuthToken()
+  const token = getGitHubAuthToken()
 
   if (token && opts?.includeAuthorization !== false) {
     headers.Authorization = `Bearer ${token}`

src/utils/env.functions.ts

@@ -25,7 +25,6 @@ function getEnvVar(key: string): string | undefined {
 export const envFunctions = {
   GITHUB_AUTH_TOKEN:
     getEnvVar('GITHUB_AUTH_TOKEN') || 'USE_A_REAL_KEY_IN_PRODUCTION',
-  GITHUB_CONTENT_TOKEN: getEnvVar('GITHUB_CONTENT_TOKEN'),
   GITHUB_WEBHOOK_SECRET: getEnvVar('GITHUB_WEBHOOK_SECRET'),
   GITHUB_OAUTH_CLIENT_ID: getEnvVar('GITHUB_OAUTH_CLIENT_ID'),
   GITHUB_OAUTH_CLIENT_SECRET: getEnvVar('GITHUB_OAUTH_CLIENT_SECRET'),

src/utils/env.ts

@@ -3,7 +3,6 @@ import * as v from 'valibot'
 // Define server-only schema
 const serverEnvSchema = v.object({
   GITHUB_AUTH_TOKEN: v.optional(v.string(), 'USE_A_REAL_KEY_IN_PRODUCTION'),
-  GITHUB_CONTENT_TOKEN: v.optional(v.string()),
   GITHUB_WEBHOOK_SECRET: v.optional(v.string()),
   GITHUB_OAUTH_CLIENT_ID: v.optional(v.string()),
   GITHUB_OAUTH_CLIENT_SECRET: v.optional(v.string()),