Task #2663
closed
Idea #1904: User can get a no-auth-required link to an Arvados object, i.e., turn on "anyone with the link can view" permission
Workbench supports a "temporary API token" query parameter everywhere
Description
When provided, Workbench uses the API token to make any API server requests. However, unlike the current api_token behavior, Workbench does not set up or change the current user session based on this token.
Updated by Brett Smith over 10 years ago
- Remaining (hours) changed from 6.0 to 1.0
Done in 1904-workbench-temp-token-wip, awaiting review. The new parameter is called api_ticket; a ticket is like a token, except you can only use it once.
Updated by Brett Smith over 10 years ago
- Remaining (hours) changed from 1.0 to 4.0
Upping the remaining time because we need another approach based on Tom's feedback.
Updated by Brett Smith over 10 years ago
- Status changed from New to In Progress
- Start date set to 04/28/2014
This feature should simply hook into the functionality implemented in #2702.
Updated by Brett Smith over 10 years ago
- Remaining (hours) changed from 4.0 to 2.0
1904-workbench-reader-tokens-wip branch pushed for review.
Updated by Brett Smith over 10 years ago
- Status changed from In Progress to Resolved
- % Done changed from 0 to 100
- Remaining (hours) changed from 2.0 to 0.0
Applied in changeset arvados|commit:8dbf8bd4d53c200ca81494556326c03abae74581.