[Copilot]

AppInstallationAuthStrategy yields a fresh httpx.Request for the token exchange. httpx only sets the timeout extension on the request passed to send(), not on requests an Auth flow yields. The token request therefore went out with no timeout, and the first call on a client (and every token refresh) could hang indefinitely.

• githubkit/auth/app.py
  • _build_installation_auth_request now takes the incoming request and copies its extensions onto the token request.
  • sync_auth_flow and async_auth_flow pass the incoming request through.

gh = GitHub(AppInstallationAuthStrategy(1, key, 2), timeout=5, ...)
gh.rest.users.get_by_username("x")
# before: POST /app/installations/2/access_tokens -> timeout=None
# after:  POST /app/installations/2/access_tokens -> {'connect': 5, 'read': 5, 'write': 5, 'pool': 5}

Review notes:

• Approach: the issue suggested client.build_request. I copied the incoming request's extensions instead, because the auth flow has no client reference. That also carries over any other per-request extensions, not just timeout.
• Not covered: the OAuth token-exchange requests in auth/oauth.py build bare httpx.Requests too. Those helpers are also used outside an httpx auth flow, where there is no incoming request to copy from, so I left them alone.
• Tests: none added or run.

• Fixes Bug: the App installation token request ignores the client timeout #331

[yanyongyu]

pre-commit.ci autofix