The login subcommand for nbreport (See https://sqr-023.lsst.io and DM-15003) will obtain a personal access token for a user from GitHub. This personal access token will then be used to authenticate the user on api.lsst.codes/nbreport (DM-15199) and authorize that user based on their organization memberships. This technique is similar to what we're already doing at https://github.com/lsst-sqre/sqre-codekit Doing so ensures that a person's actual GitHub password never passes through our servers, and instead resides locally on their machine.