diff --git a/src/Composer/Factory.php b/src/Composer/Factory.php index 2ab506a9c..d02f68d41 100644 --- a/src/Composer/Factory.php +++ b/src/Composer/Factory.php @@ -199,6 +199,9 @@ class Factory // reload oauth token from config if available if ($tokens = $config->get('github-oauth')) { foreach ($tokens as $domain => $token) { + if (!preg_match('{^[a-z0-9]+$}', $token)) { + throw new \UnexpectedValueException('Your github oauth token for '.$domain.' contains invalid characters: "'.$token.'"'); + } $io->setAuthentication($domain, $token, 'x-oauth-basic'); } }