Apps and the API


I’m implementing an app which should read certain repository files. The proper way to do this seems to create a GitHub app with read access to repositories.

I’ve already created my app and am able to install the application. But I’m a bit confused about how to use the app now to retrieve file contents? I can’t imagine just using the owning user to use the API, especially in terms of permissions?

Edit: after some more digging it seems like I need an installation access token. But it seems weird that I’m only able to get that by using a 10 min JWT?

Thanks in advance