I was logging into cloudflare and someone was asking to access repo for review

[marmot7775]

🏷️ Discussion Type

Question

Body

Hi, I was in the process of logging into my account and someone was asking for access. Before I could think about it, I didn't let him in. I regret that now as I kind of recognized him as someone interested in what I'm interested in. I can't figure out who it was. Any ideas? Thanks.

Neil

[nirav-gajera]

As far as I know, GitHub doesn't provide a way to view or recover a login approval request after you've denied it.

If the request was legitimate, the person can usually send another request or contact you through another GitHub feature (such as an issue, discussion, or collaboration invitation).

If this happened while you were signing in through Cloudflare, it's also possible the prompt came from Cloudflare or another service rather than GitHub itself. In that case, you may want to check that service's logs or account activity, if available.

[marmot7775]

I found him in the logs and contacted him. I had just signed up for his app so he was checking out mine. What's a bit odd is while I was logging in I noticed he got access. He was looking around i guess. I revoked. He doesn't seem like he meant harm but this event has me a bit unsettled. Thanks!

[nirav-gajera]

Good that you were able to identify and contact him.

If someone you don't know gets access to your repository unexpectedly, it's still a good idea to treat it carefully even if they seem trustworthy. Revoking the access was a reasonable step.

For future cases, you may want to:

• Check your GitHub/Cloudflare security logs when you see unexpected access.
• Review third-party app authorizations connected to your account.
• Enable two-factor authentication if you haven't already.
• Avoid approving access requests unless you recognize the source and understand what permissions are being granted.

Hopefully this was just an expected interaction from the app/service you signed up for, but it's always better to verify first.