From 2b7c546f84c5bc9d3b1e677652cd0d669c5daf9f Mon Sep 17 00:00:00 2001
From: Adam Setch <adam.setch@outlook.com>
Date: Thu, 10 Sep 2026 21:34:42 -0400
Subject: [PATCH 1/3] fix: clarify GitHub auth methods

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
---
 src/renderer/hooks/useLogins.test.tsx         | 29 +++++++++++++++++--
 src/renderer/hooks/useLogins.ts               | 13 +++++++--
 src/renderer/routes/Accounts.tsx              |  6 +++-
 .../github/LoginWithDeviceFlow.test.tsx       |  1 +
 .../routes/github/LoginWithDeviceFlow.tsx     |  2 +-
 .../LoginWithPersonalAccessToken.test.tsx     |  8 +++++
 .../github/LoginWithPersonalAccessToken.tsx   |  6 ++--
 ...LoginWithPersonalAccessToken.test.tsx.snap |  8 ++---
 src/renderer/utils/auth/types.ts              |  2 +-
 .../utils/forges/github/adapter.test.ts       |  3 +-
 src/renderer/utils/forges/github/adapter.ts   | 11 +++----
 src/renderer/utils/forges/github/auth.test.ts | 18 ++++++++++++
 src/renderer/utils/forges/github/auth.ts      | 16 +++++++++-
 13 files changed, 102 insertions(+), 21 deletions(-)

diff --git a/src/renderer/hooks/useLogins.test.tsx b/src/renderer/hooks/useLogins.test.tsx
index b734fce2b..3dc6178fc 100644
--- a/src/renderer/hooks/useLogins.test.tsx
+++ b/src/renderer/hooks/useLogins.test.tsx
@@ -4,7 +4,11 @@ import type { ReactNode } from 'react';
 import { QueryClient, QueryClientProvider } from '@tanstack/react-query';
 
 import { setNotificationsOverrides } from '../__helpers__/hook-mocks';
-import { mockBitbucketAccount, mockGitHubCloudAccount } from '../__mocks__/account-mocks';
+import {
+  mockBitbucketAccount,
+  mockGitHubAppAccount,
+  mockGitHubCloudAccount,
+} from '../__mocks__/account-mocks';
 
 import { Constants } from '../constants';
 
@@ -87,7 +91,28 @@ describe('renderer/hooks/useLogins.ts', () => {
       );
     });
 
-    expect(createAccountSpy).toHaveBeenCalledWith('GitHub App', 'token', 'github.com', 'github');
+    expect(createAccountSpy).toHaveBeenCalledWith(
+      'Gitify OAuth App',
+      'token',
+      'github.com',
+      'github',
+    );
+  });
+
+  it('migrates a legacy GitHub App device-flow account after re-authentication', async () => {
+    useAccountsStore.setState({ accounts: [mockGitHubAppAccount] });
+    const { result } = renderLoginsHook();
+
+    await act(async () => {
+      await result.current.loginWithDeviceFlowComplete(
+        'github',
+        'token' as Token,
+        Constants.GITHUB_HOSTNAME,
+      );
+    });
+
+    expect(removeAccountNotificationsMock).toHaveBeenCalledWith(mockGitHubAppAccount);
+    expect(removeAccountSpy).toHaveBeenCalledWith(mockGitHubAppAccount);
   });
 
   it('loginWithOAuthApp delegates to the forge adapter', async () => {
diff --git a/src/renderer/hooks/useLogins.ts b/src/renderer/hooks/useLogins.ts
index 76f510678..bf6007b6b 100644
--- a/src/renderer/hooks/useLogins.ts
+++ b/src/renderer/hooks/useLogins.ts
@@ -94,14 +94,23 @@ export const useLogins = (): LoginsState => {
       }
       const method = deviceFlow.authMethod;
 
-      const existingAccount = accounts.find((a) => a.hostname === hostname && a.method === method);
+      const existingAccount = accounts.find(
+        (a) =>
+          a.hostname === hostname &&
+          (a.method === method ||
+            (forge === 'github' && method === 'Gitify OAuth App' && a.method === 'GitHub App')),
+      );
       if (existingAccount) {
         await removeAccountNotifications(existingAccount);
       }
 
       await createAccount(method, token, hostname, forge);
+
+      if (existingAccount?.method === 'GitHub App' && method === 'Gitify OAuth App') {
+        removeAccount(existingAccount);
+      }
     },
-    [accounts, createAccount, removeAccountNotifications],
+    [accounts, createAccount, removeAccount, removeAccountNotifications],
   );
 
   /**
diff --git a/src/renderer/routes/Accounts.tsx b/src/renderer/routes/Accounts.tsx
index d86b75459..810b984a6 100644
--- a/src/renderer/routes/Accounts.tsx
+++ b/src/renderer/routes/Accounts.tsx
@@ -112,8 +112,12 @@ export const AccountsRoute: FC = () => {
   };
 
   const handleReAuthenticate = (account: Account) => {
+    const authMethod =
+      account.forge === 'github' && account.method === 'GitHub App'
+        ? 'Gitify OAuth App'
+        : account.method;
     const loginMethod = getAdapter(account).loginMethods.find(
-      (method) => method.authMethod === account.method,
+      (method) => method.authMethod === authMethod,
     );
 
     if (!loginMethod) {
diff --git a/src/renderer/routes/github/LoginWithDeviceFlow.test.tsx b/src/renderer/routes/github/LoginWithDeviceFlow.test.tsx
index 8b42a6158..9488ba50e 100644
--- a/src/renderer/routes/github/LoginWithDeviceFlow.test.tsx
+++ b/src/renderer/routes/github/LoginWithDeviceFlow.test.tsx
@@ -30,6 +30,7 @@ describe('renderer/routes/github/LoginWithDeviceFlow.tsx', () => {
     });
 
     expect(screen.getByText('Receive notifications for:')).toBeInTheDocument();
+    expect(screen.getByText("Authorize Gitify's OAuth App")).toBeInTheDocument();
     expect(screen.getByTestId('device-scope-public')).toBeInTheDocument();
     expect(screen.getByTestId('device-scope-full')).toBeInTheDocument();
 
diff --git a/src/renderer/routes/github/LoginWithDeviceFlow.tsx b/src/renderer/routes/github/LoginWithDeviceFlow.tsx
index 1de9eb1fc..e4e160913 100644
--- a/src/renderer/routes/github/LoginWithDeviceFlow.tsx
+++ b/src/renderer/routes/github/LoginWithDeviceFlow.tsx
@@ -295,7 +295,7 @@ export const GitHubLoginWithDeviceFlowRoute: FC = () => {
 
   return (
     <Page testId="Login With Device Flow">
-      <Header icon={SignInIcon}>Authorize with GitHub</Header>
+      <Header icon={SignInIcon}>Authorize Gitify's OAuth App</Header>
 
       <Contents scrollFade>
         {error && (
diff --git a/src/renderer/routes/github/LoginWithPersonalAccessToken.test.tsx b/src/renderer/routes/github/LoginWithPersonalAccessToken.test.tsx
index 6ea5c7297..cabff5b2f 100644
--- a/src/renderer/routes/github/LoginWithPersonalAccessToken.test.tsx
+++ b/src/renderer/routes/github/LoginWithPersonalAccessToken.test.tsx
@@ -25,6 +25,14 @@ describe('renderer/routes/github/LoginWithPersonalAccessToken.tsx', () => {
     expect(tree.container).toMatchSnapshot();
   });
 
+  it('explains that fine-grained tokens are unsupported', () => {
+    renderWithProviders(<GitHubLoginWithPersonalAccessTokenRoute />);
+
+    expect(
+      screen.getByText(/Fine-grained personal access tokens are not supported/),
+    ).toBeInTheDocument();
+  });
+
   it('let us go back', async () => {
     renderWithProviders(<GitHubLoginWithPersonalAccessTokenRoute />);
 
diff --git a/src/renderer/routes/github/LoginWithPersonalAccessToken.tsx b/src/renderer/routes/github/LoginWithPersonalAccessToken.tsx
index 36c8c997e..6eceba31a 100644
--- a/src/renderer/routes/github/LoginWithPersonalAccessToken.tsx
+++ b/src/renderer/routes/github/LoginWithPersonalAccessToken.tsx
@@ -12,13 +12,13 @@ export const GitHubLoginWithPersonalAccessTokenRoute: FC = () => (
     forge="github"
     hostnameCaption="Change only if you are using GitHub Enterprise Server"
     hostnamePlaceholder="github.com"
-    title="Login with Personal Access Token"
-    tokenPlaceholder="Your generated token (40 characters)"
+    title="Login with Classic Personal Access Token"
+    tokenPlaceholder="Your classic token (40 characters)"
     tokenSettingsCaption="on GitHub to paste the token below."
     tokenSettingsLabel="Generate a PAT"
   >
     <Text as="i" className="text-xs">
-      The{' '}
+      Fine-grained personal access tokens are not supported. The{' '}
       <Tooltip direction="se" text={formatRecommendedOAuthScopes()}>
         <button type="button">
           <Text as="u">recommended scopes</Text>
diff --git a/src/renderer/routes/github/__snapshots__/LoginWithPersonalAccessToken.test.tsx.snap b/src/renderer/routes/github/__snapshots__/LoginWithPersonalAccessToken.test.tsx.snap
index 9cf1f8749..636083d5a 100644
--- a/src/renderer/routes/github/__snapshots__/LoginWithPersonalAccessToken.test.tsx.snap
+++ b/src/renderer/routes/github/__snapshots__/LoginWithPersonalAccessToken.test.tsx.snap
@@ -60,7 +60,7 @@ exports[`renderer/routes/github/LoginWithPersonalAccessToken.tsx > renders corre
               data-justify="start"
               data-padding="none"
               data-wrap="nowrap"
-              id="title-login-with-personal-access-token"
+              id="title-login-with-classic-personal-access-token"
             >
               <svg
                 aria-hidden="true"
@@ -83,7 +83,7 @@ exports[`renderer/routes/github/LoginWithPersonalAccessToken.tsx > renders corre
                 class="prc-Heading-Heading-MtWFE"
                 data-component="Heading"
               >
-                Login with Personal Access Token
+                Login with Classic Personal Access Token
               </h4>
             </div>
           </div>
@@ -236,7 +236,7 @@ exports[`renderer/routes/github/LoginWithPersonalAccessToken.tsx > renders corre
             class="text-xs prc-Text-Text-9mHv3"
             data-component="Text"
           >
-            The
+            Fine-grained personal access tokens are not supported. The
              
             <button
               aria-describedby="_r_8_"
@@ -303,7 +303,7 @@ exports[`renderer/routes/github/LoginWithPersonalAccessToken.tsx > renders corre
               data-testid="login-token"
               id="_r_9_"
               name="token"
-              placeholder="Your generated token (40 characters)"
+              placeholder="Your classic token (40 characters)"
               type="password"
               value=""
             />
diff --git a/src/renderer/utils/auth/types.ts b/src/renderer/utils/auth/types.ts
index 9e7a4f594..a2d79badf 100644
--- a/src/renderer/utils/auth/types.ts
+++ b/src/renderer/utils/auth/types.ts
@@ -1,6 +1,6 @@
 import type { AuthCode, ClientID, ClientSecret, Forge, Hostname, Token } from '../../types';
 
-export type AuthMethod = 'GitHub App' | 'Personal Access Token' | 'OAuth App';
+export type AuthMethod = 'GitHub App' | 'Gitify OAuth App' | 'Personal Access Token' | 'OAuth App';
 
 export type PlatformType =
   | 'Bitbucket Cloud'
diff --git a/src/renderer/utils/forges/github/adapter.test.ts b/src/renderer/utils/forges/github/adapter.test.ts
index 446b9e008..f447ea66d 100644
--- a/src/renderer/utils/forges/github/adapter.test.ts
+++ b/src/renderer/utils/forges/github/adapter.test.ts
@@ -54,12 +54,13 @@ describe('renderer/utils/forges/github/adapter.ts', () => {
 
     it('maps each auth method to its icon', () => {
       expect(githubAdapter.getAuthMethodIcon('GitHub App')).toBe(AppsIcon);
+      expect(githubAdapter.getAuthMethodIcon('Gitify OAuth App')).toBe(PersonIcon);
       expect(githubAdapter.getAuthMethodIcon('OAuth App')).toBe(PersonIcon);
       expect(githubAdapter.getAuthMethodIcon('Personal Access Token')).toBe(KeyIcon);
     });
 
     it('wires the device-flow and OAuth-app methods so the context can dispatch via the adapter', () => {
-      expect(githubAdapter.deviceFlow?.authMethod).toBe('GitHub App');
+      expect(githubAdapter.deviceFlow?.authMethod).toBe('Gitify OAuth App');
       expect(githubAdapter.deviceFlow?.start).toBeDefined();
       expect(githubAdapter.deviceFlow?.poll).toBeDefined();
       expect(githubAdapter.deviceFlow?.getRevokeAccessUrl).toBeDefined();
diff --git a/src/renderer/utils/forges/github/adapter.ts b/src/renderer/utils/forges/github/adapter.ts
index deead393c..a04e2cfd5 100644
--- a/src/renderer/utils/forges/github/adapter.ts
+++ b/src/renderer/utils/forges/github/adapter.ts
@@ -8,6 +8,7 @@ import type { ForgeAdapter, NotificationDisplayHelpers, RefreshAccountData } fro
 
 import {
   extractHostVersion,
+  getDeviceFlowRevokeAccessURL,
   getDeveloperSettingsURL,
   getNewOAuthAppURL,
   getNewTokenURL,
@@ -97,10 +98,10 @@ export const githubAdapter: ForgeAdapter = {
     {
       testId: 'login-github',
       icon: MarkGithubIcon,
-      label: 'GitHub',
+      label: 'GitHub OAuth',
       variant: 'primary',
       route: '/login/github/device-flow',
-      authMethod: 'GitHub App',
+      authMethod: 'Gitify OAuth App',
     },
     {
       testId: 'login-pat',
@@ -119,11 +120,10 @@ export const githubAdapter: ForgeAdapter = {
   ],
 
   deviceFlow: {
-    authMethod: 'GitHub App',
+    authMethod: 'Gitify OAuth App',
     start: startGitHubDeviceFlow,
     poll: pollGitHubDeviceFlow,
-    getRevokeAccessUrl: (hostname) =>
-      getDeveloperSettingsURL({ hostname, method: 'GitHub App' } as Account),
+    getRevokeAccessUrl: getDeviceFlowRevokeAccessURL,
   },
 
   oauthWebApp: {
@@ -172,6 +172,7 @@ function githubAuthMethodIcon(method: AuthMethod) {
   switch (method) {
     case 'GitHub App':
       return AppsIcon;
+    case 'Gitify OAuth App':
     case 'OAuth App':
       return PersonIcon;
     default:
diff --git a/src/renderer/utils/forges/github/auth.test.ts b/src/renderer/utils/forges/github/auth.test.ts
index 618bc917f..e6bc0fb52 100644
--- a/src/renderer/utils/forges/github/auth.test.ts
+++ b/src/renderer/utils/forges/github/auth.test.ts
@@ -6,6 +6,7 @@ import type { AuthMethod } from '../../auth/types';
 import {
   extractHostVersion,
   getDeveloperSettingsURL,
+  getDeviceFlowRevokeAccessURL,
   getGitHubAuthBaseUrl,
   getNewOAuthAppURL,
   getNewTokenURL,
@@ -70,6 +71,23 @@ describe('renderer/utils/forges/github/auth.ts', () => {
       ).toBe('https://github.com/settings/connections/applications/FAKE_CLIENT_ID_123');
     });
 
+    it('returns the built-in Gitify OAuth App connections URL', () => {
+      expect(
+        getDeveloperSettingsURL({
+          hostname: 'github.com' as Hostname,
+          method: 'Gitify OAuth App',
+        } as Account),
+      ).toBe('https://github.com/settings/connections/applications/FAKE_CLIENT_ID_123');
+    });
+
+    describe('getDeviceFlowRevokeAccessURL', () => {
+      it('returns the built-in OAuth App connection URL', () => {
+        expect(getDeviceFlowRevokeAccessURL('github.com' as Hostname)).toBe(
+          'https://github.com/settings/connections/applications/FAKE_CLIENT_ID_123',
+        );
+      });
+    });
+
     it('returns the OAuth App developer URL', () => {
       expect(
         getDeveloperSettingsURL({
diff --git a/src/renderer/utils/forges/github/auth.ts b/src/renderer/utils/forges/github/auth.ts
index 1f64405cc..fc2f3e054 100644
--- a/src/renderer/utils/forges/github/auth.ts
+++ b/src/renderer/utils/forges/github/auth.ts
@@ -62,7 +62,7 @@ export function getGitHubAuthBaseUrl(hostname: Hostname): URL {
 /**
  * Return the GitHub developer settings URL appropriate for the account's auth method.
  *
- * - GitHub App → application connections page
+ * - GitHub App or built-in Gitify OAuth App → application connections page
  * - OAuth App → developer settings page
  * - Personal Access Token → tokens settings page
  *
@@ -74,6 +74,7 @@ export function getDeveloperSettingsURL(account: Account): Link {
 
   switch (account.method) {
     case 'GitHub App':
+    case 'Gitify OAuth App':
       settingsURL.pathname = `/settings/connections/applications/${Constants.OAUTH_DEVICE_FLOW_CLIENT_ID}`;
       break;
     case 'OAuth App':
@@ -86,6 +87,19 @@ export function getDeveloperSettingsURL(account: Account): Link {
       settingsURL.pathname = '/settings';
       break;
   }
+
+  return settingsURL.toString() as Link;
+}
+
+/**
+ * Return the connected-application settings URL for Gitify's built-in OAuth App.
+ *
+ * This intentionally differs from the generic OAuth App settings page used for
+ * user-configured apps: it lets a user revoke Gitify's existing authorization.
+ */
+export function getDeviceFlowRevokeAccessURL(hostname: Hostname): Link {
+  const settingsURL = new URL(`https://${hostname}`);
+  settingsURL.pathname = `/settings/connections/applications/${Constants.OAUTH_DEVICE_FLOW_CLIENT_ID}`;
   return settingsURL.toString() as Link;
 }
 

From 8c15753a9517144db00e9024848f225b5a53b719 Mon Sep 17 00:00:00 2001
From: Adam Setch <adam.setch@outlook.com>
Date: Thu, 10 Sep 2026 21:40:48 -0400
Subject: [PATCH 2/3] fix: simplify device flow auth label

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
---
 src/renderer/hooks/useLogins.test.tsx            | 2 +-
 src/renderer/hooks/useLogins.ts                  | 4 ++--
 src/renderer/routes/Accounts.tsx                 | 2 +-
 src/renderer/utils/auth/types.ts                 | 2 +-
 src/renderer/utils/forges/github/adapter.test.ts | 4 ++--
 src/renderer/utils/forges/github/adapter.ts      | 8 ++++----
 src/renderer/utils/forges/github/auth.test.ts    | 4 ++--
 src/renderer/utils/forges/github/auth.ts         | 6 +++---
 8 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/src/renderer/hooks/useLogins.test.tsx b/src/renderer/hooks/useLogins.test.tsx
index 3dc6178fc..c94725198 100644
--- a/src/renderer/hooks/useLogins.test.tsx
+++ b/src/renderer/hooks/useLogins.test.tsx
@@ -92,7 +92,7 @@ describe('renderer/hooks/useLogins.ts', () => {
     });
 
     expect(createAccountSpy).toHaveBeenCalledWith(
-      'Gitify OAuth App',
+      'OAuth Device Flow',
       'token',
       'github.com',
       'github',
diff --git a/src/renderer/hooks/useLogins.ts b/src/renderer/hooks/useLogins.ts
index bf6007b6b..a2ae698f5 100644
--- a/src/renderer/hooks/useLogins.ts
+++ b/src/renderer/hooks/useLogins.ts
@@ -98,7 +98,7 @@ export const useLogins = (): LoginsState => {
         (a) =>
           a.hostname === hostname &&
           (a.method === method ||
-            (forge === 'github' && method === 'Gitify OAuth App' && a.method === 'GitHub App')),
+            (forge === 'github' && method === 'OAuth Device Flow' && a.method === 'GitHub App')),
       );
       if (existingAccount) {
         await removeAccountNotifications(existingAccount);
@@ -106,7 +106,7 @@ export const useLogins = (): LoginsState => {
 
       await createAccount(method, token, hostname, forge);
 
-      if (existingAccount?.method === 'GitHub App' && method === 'Gitify OAuth App') {
+      if (existingAccount?.method === 'GitHub App' && method === 'OAuth Device Flow') {
         removeAccount(existingAccount);
       }
     },
diff --git a/src/renderer/routes/Accounts.tsx b/src/renderer/routes/Accounts.tsx
index 810b984a6..0804c367a 100644
--- a/src/renderer/routes/Accounts.tsx
+++ b/src/renderer/routes/Accounts.tsx
@@ -114,7 +114,7 @@ export const AccountsRoute: FC = () => {
   const handleReAuthenticate = (account: Account) => {
     const authMethod =
       account.forge === 'github' && account.method === 'GitHub App'
-        ? 'Gitify OAuth App'
+        ? 'OAuth Device Flow'
         : account.method;
     const loginMethod = getAdapter(account).loginMethods.find(
       (method) => method.authMethod === authMethod,
diff --git a/src/renderer/utils/auth/types.ts b/src/renderer/utils/auth/types.ts
index a2d79badf..cefae110e 100644
--- a/src/renderer/utils/auth/types.ts
+++ b/src/renderer/utils/auth/types.ts
@@ -1,6 +1,6 @@
 import type { AuthCode, ClientID, ClientSecret, Forge, Hostname, Token } from '../../types';
 
-export type AuthMethod = 'GitHub App' | 'Gitify OAuth App' | 'Personal Access Token' | 'OAuth App';
+export type AuthMethod = 'GitHub App' | 'OAuth Device Flow' | 'Personal Access Token' | 'OAuth App';
 
 export type PlatformType =
   | 'Bitbucket Cloud'
diff --git a/src/renderer/utils/forges/github/adapter.test.ts b/src/renderer/utils/forges/github/adapter.test.ts
index f447ea66d..238173e29 100644
--- a/src/renderer/utils/forges/github/adapter.test.ts
+++ b/src/renderer/utils/forges/github/adapter.test.ts
@@ -54,13 +54,13 @@ describe('renderer/utils/forges/github/adapter.ts', () => {
 
     it('maps each auth method to its icon', () => {
       expect(githubAdapter.getAuthMethodIcon('GitHub App')).toBe(AppsIcon);
-      expect(githubAdapter.getAuthMethodIcon('Gitify OAuth App')).toBe(PersonIcon);
+      expect(githubAdapter.getAuthMethodIcon('OAuth Device Flow')).toBe(PersonIcon);
       expect(githubAdapter.getAuthMethodIcon('OAuth App')).toBe(PersonIcon);
       expect(githubAdapter.getAuthMethodIcon('Personal Access Token')).toBe(KeyIcon);
     });
 
     it('wires the device-flow and OAuth-app methods so the context can dispatch via the adapter', () => {
-      expect(githubAdapter.deviceFlow?.authMethod).toBe('Gitify OAuth App');
+      expect(githubAdapter.deviceFlow?.authMethod).toBe('OAuth Device Flow');
       expect(githubAdapter.deviceFlow?.start).toBeDefined();
       expect(githubAdapter.deviceFlow?.poll).toBeDefined();
       expect(githubAdapter.deviceFlow?.getRevokeAccessUrl).toBeDefined();
diff --git a/src/renderer/utils/forges/github/adapter.ts b/src/renderer/utils/forges/github/adapter.ts
index a04e2cfd5..5a0d53c20 100644
--- a/src/renderer/utils/forges/github/adapter.ts
+++ b/src/renderer/utils/forges/github/adapter.ts
@@ -98,10 +98,10 @@ export const githubAdapter: ForgeAdapter = {
     {
       testId: 'login-github',
       icon: MarkGithubIcon,
-      label: 'GitHub OAuth',
+      label: 'GitHub',
       variant: 'primary',
       route: '/login/github/device-flow',
-      authMethod: 'Gitify OAuth App',
+      authMethod: 'OAuth Device Flow',
     },
     {
       testId: 'login-pat',
@@ -120,7 +120,7 @@ export const githubAdapter: ForgeAdapter = {
   ],
 
   deviceFlow: {
-    authMethod: 'Gitify OAuth App',
+    authMethod: 'OAuth Device Flow',
     start: startGitHubDeviceFlow,
     poll: pollGitHubDeviceFlow,
     getRevokeAccessUrl: getDeviceFlowRevokeAccessURL,
@@ -172,7 +172,7 @@ function githubAuthMethodIcon(method: AuthMethod) {
   switch (method) {
     case 'GitHub App':
       return AppsIcon;
-    case 'Gitify OAuth App':
+    case 'OAuth Device Flow':
     case 'OAuth App':
       return PersonIcon;
     default:
diff --git a/src/renderer/utils/forges/github/auth.test.ts b/src/renderer/utils/forges/github/auth.test.ts
index e6bc0fb52..a0335aa68 100644
--- a/src/renderer/utils/forges/github/auth.test.ts
+++ b/src/renderer/utils/forges/github/auth.test.ts
@@ -71,11 +71,11 @@ describe('renderer/utils/forges/github/auth.ts', () => {
       ).toBe('https://github.com/settings/connections/applications/FAKE_CLIENT_ID_123');
     });
 
-    it('returns the built-in Gitify OAuth App connections URL', () => {
+    it('returns the OAuth device-flow connections URL', () => {
       expect(
         getDeveloperSettingsURL({
           hostname: 'github.com' as Hostname,
-          method: 'Gitify OAuth App',
+          method: 'OAuth Device Flow',
         } as Account),
       ).toBe('https://github.com/settings/connections/applications/FAKE_CLIENT_ID_123');
     });
diff --git a/src/renderer/utils/forges/github/auth.ts b/src/renderer/utils/forges/github/auth.ts
index fc2f3e054..2c9c96ede 100644
--- a/src/renderer/utils/forges/github/auth.ts
+++ b/src/renderer/utils/forges/github/auth.ts
@@ -62,7 +62,7 @@ export function getGitHubAuthBaseUrl(hostname: Hostname): URL {
 /**
  * Return the GitHub developer settings URL appropriate for the account's auth method.
  *
- * - GitHub App or built-in Gitify OAuth App → application connections page
+ * - GitHub App or OAuth device flow → application connections page
  * - OAuth App → developer settings page
  * - Personal Access Token → tokens settings page
  *
@@ -74,7 +74,7 @@ export function getDeveloperSettingsURL(account: Account): Link {
 
   switch (account.method) {
     case 'GitHub App':
-    case 'Gitify OAuth App':
+    case 'OAuth Device Flow':
       settingsURL.pathname = `/settings/connections/applications/${Constants.OAUTH_DEVICE_FLOW_CLIENT_ID}`;
       break;
     case 'OAuth App':
@@ -92,7 +92,7 @@ export function getDeveloperSettingsURL(account: Account): Link {
 }
 
 /**
- * Return the connected-application settings URL for Gitify's built-in OAuth App.
+ * Return the connected-application settings URL for the built-in OAuth device flow.
  *
  * This intentionally differs from the generic OAuth App settings page used for
  * user-configured apps: it lets a user revoke Gitify's existing authorization.

From a24bb93f0d8271fadfd6878a46b7513c95a3f440 Mon Sep 17 00:00:00 2001
From: Adam Setch <adam.setch@outlook.com>
Date: Thu, 10 Sep 2026 21:43:43 -0400
Subject: [PATCH 3/3] fix: distinguish configured OAuth app

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
---
 src/renderer/hooks/useLogins.test.tsx            | 2 +-
 src/renderer/hooks/useLogins.ts                  | 4 ++--
 src/renderer/routes/Accounts.tsx                 | 2 +-
 src/renderer/utils/auth/types.ts                 | 2 +-
 src/renderer/utils/forges/github/adapter.test.ts | 4 ++--
 src/renderer/utils/forges/github/adapter.ts      | 6 +++---
 src/renderer/utils/forges/github/auth.test.ts    | 4 ++--
 src/renderer/utils/forges/github/auth.ts         | 6 +++---
 8 files changed, 15 insertions(+), 15 deletions(-)

diff --git a/src/renderer/hooks/useLogins.test.tsx b/src/renderer/hooks/useLogins.test.tsx
index c94725198..3dc6178fc 100644
--- a/src/renderer/hooks/useLogins.test.tsx
+++ b/src/renderer/hooks/useLogins.test.tsx
@@ -92,7 +92,7 @@ describe('renderer/hooks/useLogins.ts', () => {
     });
 
     expect(createAccountSpy).toHaveBeenCalledWith(
-      'OAuth Device Flow',
+      'Gitify OAuth App',
       'token',
       'github.com',
       'github',
diff --git a/src/renderer/hooks/useLogins.ts b/src/renderer/hooks/useLogins.ts
index a2ae698f5..bf6007b6b 100644
--- a/src/renderer/hooks/useLogins.ts
+++ b/src/renderer/hooks/useLogins.ts
@@ -98,7 +98,7 @@ export const useLogins = (): LoginsState => {
         (a) =>
           a.hostname === hostname &&
           (a.method === method ||
-            (forge === 'github' && method === 'OAuth Device Flow' && a.method === 'GitHub App')),
+            (forge === 'github' && method === 'Gitify OAuth App' && a.method === 'GitHub App')),
       );
       if (existingAccount) {
         await removeAccountNotifications(existingAccount);
@@ -106,7 +106,7 @@ export const useLogins = (): LoginsState => {
 
       await createAccount(method, token, hostname, forge);
 
-      if (existingAccount?.method === 'GitHub App' && method === 'OAuth Device Flow') {
+      if (existingAccount?.method === 'GitHub App' && method === 'Gitify OAuth App') {
         removeAccount(existingAccount);
       }
     },
diff --git a/src/renderer/routes/Accounts.tsx b/src/renderer/routes/Accounts.tsx
index 0804c367a..810b984a6 100644
--- a/src/renderer/routes/Accounts.tsx
+++ b/src/renderer/routes/Accounts.tsx
@@ -114,7 +114,7 @@ export const AccountsRoute: FC = () => {
   const handleReAuthenticate = (account: Account) => {
     const authMethod =
       account.forge === 'github' && account.method === 'GitHub App'
-        ? 'OAuth Device Flow'
+        ? 'Gitify OAuth App'
         : account.method;
     const loginMethod = getAdapter(account).loginMethods.find(
       (method) => method.authMethod === authMethod,
diff --git a/src/renderer/utils/auth/types.ts b/src/renderer/utils/auth/types.ts
index cefae110e..a2d79badf 100644
--- a/src/renderer/utils/auth/types.ts
+++ b/src/renderer/utils/auth/types.ts
@@ -1,6 +1,6 @@
 import type { AuthCode, ClientID, ClientSecret, Forge, Hostname, Token } from '../../types';
 
-export type AuthMethod = 'GitHub App' | 'OAuth Device Flow' | 'Personal Access Token' | 'OAuth App';
+export type AuthMethod = 'GitHub App' | 'Gitify OAuth App' | 'Personal Access Token' | 'OAuth App';
 
 export type PlatformType =
   | 'Bitbucket Cloud'
diff --git a/src/renderer/utils/forges/github/adapter.test.ts b/src/renderer/utils/forges/github/adapter.test.ts
index 238173e29..f447ea66d 100644
--- a/src/renderer/utils/forges/github/adapter.test.ts
+++ b/src/renderer/utils/forges/github/adapter.test.ts
@@ -54,13 +54,13 @@ describe('renderer/utils/forges/github/adapter.ts', () => {
 
     it('maps each auth method to its icon', () => {
       expect(githubAdapter.getAuthMethodIcon('GitHub App')).toBe(AppsIcon);
-      expect(githubAdapter.getAuthMethodIcon('OAuth Device Flow')).toBe(PersonIcon);
+      expect(githubAdapter.getAuthMethodIcon('Gitify OAuth App')).toBe(PersonIcon);
       expect(githubAdapter.getAuthMethodIcon('OAuth App')).toBe(PersonIcon);
       expect(githubAdapter.getAuthMethodIcon('Personal Access Token')).toBe(KeyIcon);
     });
 
     it('wires the device-flow and OAuth-app methods so the context can dispatch via the adapter', () => {
-      expect(githubAdapter.deviceFlow?.authMethod).toBe('OAuth Device Flow');
+      expect(githubAdapter.deviceFlow?.authMethod).toBe('Gitify OAuth App');
       expect(githubAdapter.deviceFlow?.start).toBeDefined();
       expect(githubAdapter.deviceFlow?.poll).toBeDefined();
       expect(githubAdapter.deviceFlow?.getRevokeAccessUrl).toBeDefined();
diff --git a/src/renderer/utils/forges/github/adapter.ts b/src/renderer/utils/forges/github/adapter.ts
index 5a0d53c20..27c8db825 100644
--- a/src/renderer/utils/forges/github/adapter.ts
+++ b/src/renderer/utils/forges/github/adapter.ts
@@ -101,7 +101,7 @@ export const githubAdapter: ForgeAdapter = {
       label: 'GitHub',
       variant: 'primary',
       route: '/login/github/device-flow',
-      authMethod: 'OAuth Device Flow',
+      authMethod: 'Gitify OAuth App',
     },
     {
       testId: 'login-pat',
@@ -120,7 +120,7 @@ export const githubAdapter: ForgeAdapter = {
   ],
 
   deviceFlow: {
-    authMethod: 'OAuth Device Flow',
+    authMethod: 'Gitify OAuth App',
     start: startGitHubDeviceFlow,
     poll: pollGitHubDeviceFlow,
     getRevokeAccessUrl: getDeviceFlowRevokeAccessURL,
@@ -172,7 +172,7 @@ function githubAuthMethodIcon(method: AuthMethod) {
   switch (method) {
     case 'GitHub App':
       return AppsIcon;
-    case 'OAuth Device Flow':
+    case 'Gitify OAuth App':
     case 'OAuth App':
       return PersonIcon;
     default:
diff --git a/src/renderer/utils/forges/github/auth.test.ts b/src/renderer/utils/forges/github/auth.test.ts
index a0335aa68..3f0ad1976 100644
--- a/src/renderer/utils/forges/github/auth.test.ts
+++ b/src/renderer/utils/forges/github/auth.test.ts
@@ -71,11 +71,11 @@ describe('renderer/utils/forges/github/auth.ts', () => {
       ).toBe('https://github.com/settings/connections/applications/FAKE_CLIENT_ID_123');
     });
 
-    it('returns the OAuth device-flow connections URL', () => {
+    it('returns the preconfigured Gitify OAuth App connections URL', () => {
       expect(
         getDeveloperSettingsURL({
           hostname: 'github.com' as Hostname,
-          method: 'OAuth Device Flow',
+          method: 'Gitify OAuth App',
         } as Account),
       ).toBe('https://github.com/settings/connections/applications/FAKE_CLIENT_ID_123');
     });
diff --git a/src/renderer/utils/forges/github/auth.ts b/src/renderer/utils/forges/github/auth.ts
index 2c9c96ede..0aa60a5a1 100644
--- a/src/renderer/utils/forges/github/auth.ts
+++ b/src/renderer/utils/forges/github/auth.ts
@@ -62,7 +62,7 @@ export function getGitHubAuthBaseUrl(hostname: Hostname): URL {
 /**
  * Return the GitHub developer settings URL appropriate for the account's auth method.
  *
- * - GitHub App or OAuth device flow → application connections page
+ * - GitHub App or preconfigured Gitify OAuth App → application connections page
  * - OAuth App → developer settings page
  * - Personal Access Token → tokens settings page
  *
@@ -74,7 +74,7 @@ export function getDeveloperSettingsURL(account: Account): Link {
 
   switch (account.method) {
     case 'GitHub App':
-    case 'OAuth Device Flow':
+    case 'Gitify OAuth App':
       settingsURL.pathname = `/settings/connections/applications/${Constants.OAUTH_DEVICE_FLOW_CLIENT_ID}`;
       break;
     case 'OAuth App':
@@ -92,7 +92,7 @@ export function getDeveloperSettingsURL(account: Account): Link {
 }
 
 /**
- * Return the connected-application settings URL for the built-in OAuth device flow.
+ * Return the connected-application settings URL for Gitify's preconfigured OAuth App.
  *
  * This intentionally differs from the generic OAuth App settings page used for
  * user-configured apps: it lets a user revoke Gitify's existing authorization.