title: When composer connects to GitHub I receive a warning about a deprecation authentication method. What authentication configuration should I use?
body: <p>GitHub has started sending emails about deprecated authentication but I have not yet found a resource for detailing what composer's <code>auth.json</code> should look like under the new regime.</p>
  
  <p>My requirements are relatively simple - using composer to update a Symfony application in development and occasionally experimenting with other repos.  </p>
  
  <p>With this, my original configuration (automatically built)...</p>
  
  <pre><code>{
      "github-oauth": {
          "github.com": "(a string)"
      }
  }
  </code></pre>
  
  <p>... I receive this warning:</p>
  
  <blockquote>
    <p>...your personal access token...was used as part of a query parameter
    to access an endpoint through the GitHub API...Please use the
    Authorization HTTP header instead...</p>
  </blockquote>
  
  <p>But when I try with this other configuration:</p>
  
  <pre><code>{
      "http-basic": {
          "github.com": {
              "username": " my email address",
              "password": " my password "
          }    }
  }
  </code></pre>
  
  <p>I receive this other warning:</p>
  
  <blockquote>
    <p>You recently used a password to access an endpoint through the GitHub
    API using Composer/1.9.1 ...We recommend using a personal access token
    (PAT) with the appropriate scope to access this endpoint instead.</p>
  </blockquote>
  
  <p>What should it really look like and why am I getting these deprecation warnings?</p>