Composer hidden Token

Question

Everytime I update composer I have to enter a Token generated on github.
I use this plugin to install bower packages.

This happened after github.com/RamonSmit/Nestable.git became a private repo.
I removed all references to this repo.

But I still get the message:

Your GitHub credentials are required to fetch private repository metadata (git://github.com/RamonSmit/Nestable.git)

Head to https://github.com/settings/tokens/new?scopes=repo&description=... to retrieve a token. It will be stored in "..." for future use by Composer. Token (hidden):

I updated composer and composer-asset-plugin to the latest version and cleared the cache.

This also didn't work:

composer config --global github-oauth.github.com xxx

How can I get rid of this unnecessary message?

Output of composer diag:

Checking composer.json: FAIL
require.yiisoft/yii2 : unbound version constraints (>=2.0.6) should be avoided
require.yiisoft/yii2-bootstrap : unbound version constraints (*) should be avoided
require.yiisoft/yii2-swiftmailer : unbound version constraints (*) should be avoided
require.fishvision/yii2-migrate : unbound version constraints (*) should be avoided
require.infoweb-internet-solutions/yii2-cms : unbound version constraints (*) should be avoided
require.bower-asset/matchHeight : unbound version constraints (@stable) should be avoided
require.infoweb-internet-solutions/yii2-news : unbound version constraints (*) should be avoided
require.infoweb-internet-solutions/yii2-action : unbound version constraints (*) should be avoided
require.infoweb-internet-solutions/yii2-member : unbound version constraints (*) should be avoided
require.dragonjet/yii2-opengraph : unbound version constraints (*) should be avoided
Checking platform settings: OK
Checking git settings: OK
Checking http connectivity to packagist: OK
Checking https connectivity to packagist: OK
Checking github.com oauth access: OK
Checking disk free space: OK
Checking pubkeys:
Tags Public Key Fingerprint: xxx
Dev Public Key Fingerprint: xxx
OK
Checking composer version: OK

auth.json: (located in C:\Users\User\AppData\Roaming\Composer)

{
    "github-oauth": {
        "github.com": "xxx"
    },
    "http-basic": {
        "bitbucket.org": {
            "username": "xxx",
            "password": "xxx"
        }
    }
}

composer global show -i

Changed current directory to C:/Users/Ruben/AppData/Roaming/Composer
fxp/composer-asset-plugin v1.1.1 NPM/Bower Dependency Manager for Composer

composer.json:

{
  "name": "yiisoft/yii2-app-advanced",
  "description": "Yii 2 Advanced Project Template",
  "keywords": [
    "yii2",
    "framework",
    "advanced",
    "project template"
  ],
  "homepage": "http://www.yiiframework.com/",
  "type": "project",
  "license": "BSD-3-Clause",
  "support": {
    "issues": "https://github.com/yiisoft/yii2/issues?state=open",
    "forum": "http://www.yiiframework.com/forum/",
    "wiki": "http://www.yiiframework.com/wiki/",
    "irc": "irc://irc.freenode.net/yii",
    "source": "https://github.com/yiisoft/yii2"
  },
  "minimum-stability": "dev",
  "require": {
    "php": ">=5.4.0",
    "yiisoft/yii2": ">=2.0.6",
    "yiisoft/yii2-bootstrap": "*",
    "yiisoft/yii2-swiftmailer": "*",
    "fishvision/yii2-migrate": "*",
    "infoweb-internet-solutions/yii2-cms": "*",
    "bower-asset/matchHeight": "@stable",
    "infoweb-internet-solutions/yii2-news": "*",
    "infoweb-internet-solutions/yii2-action": "*",
    "infoweb-internet-solutions/yii2-member": "*",
    "dragonjet/yii2-opengraph": "*",
    "infoweb-internet-solutions/yii2-image-gallery": "*"
  },
  "require-dev": {
    "yiisoft/yii2-codeception": "*",
    "yiisoft/yii2-debug": "*",
    "yiisoft/yii2-gii": "*",
    "yiisoft/yii2-faker": "*"
  },
  "config": {
    "process-timeout": 1800,
    "preferred-install": "source"
  },
  "extra": {
    "asset-installer-paths": {
      "npm-asset-library": "vendor/npm",
      "bower-asset-library": "vendor/bower"
    }
  },
  "repositories": [
    {
      "type": "vcs",
      "url": "https://github.com/infoweb-internet-solutions/yii2-i18n-module"
    },
    {
      "type": "vcs",
      "url": "https://github.com/infoweb-internet-solutions/yii2-ckeditor"
    },
    {
      "type": "vcs",
      "url": "git@bitbucket.org:infoweb-internet-solutions/yii2-news.git"
    },
    {
      "type": "vcs",
      "url": "git@bitbucket.org:infoweb-internet-solutions/yii2-action.git"
    },
    {
      "type": "vcs",
      "url": "git@bitbucket-infoweb:infoweb-internet-solutions/yii2-member.git"
    }
  ]
}

composer.lock

Answer 1

Note the token can also be added manually to the composer.json file:

{
    "require": {
        "infoweb-internet-solutions/yii2-action": "*",
    },
    "config": {
        "github-oauth": {
            "github.com": "your long token"
        }
    },
    "repositories": [
        {
            "type": "vcs",
            "url": "git@bitbucket.org:infoweb-internet-solutions/yii2-action.git"
        },
    ]
}

---

However, if you're committing the file to a VCS repository, you may not want to include the credentials in the file. In that case, you can use the COMPOSER_AUTH environment variable to pass the same information.

export COMPOSER_AUTH='{"github-oauth":{"github.com": "your long token"}}'
composer update

Answer 2

You should generate new tokens on github

Settings \ Developer settings \ Personal access tokens

Answer 3

Delete composer.lock file.

Then delete the vendor folder and run composer again to install all the packages.