Project

General

Profile

Actions

Task #2663

closed

Idea #1904: User can get a no-auth-required link to an Arvados object, i.e., turn on "anyone with the link can view" permission

Workbench supports a "temporary API token" query parameter everywhere

Added by Brett Smith almost 10 years ago. Updated almost 10 years ago.

Status:
Resolved
Priority:
Normal
Assigned To:

Description

When provided, Workbench uses the API token to make any API server requests. However, unlike the current api_token behavior, Workbench does not set up or change the current user session based on this token.

Actions #1

Updated by Brett Smith almost 10 years ago

  • Remaining (hours) changed from 6.0 to 1.0

Done in 1904-workbench-temp-token-wip, awaiting review. The new parameter is called api_ticket; a ticket is like a token, except you can only use it once.

Actions #2

Updated by Brett Smith almost 10 years ago

  • Remaining (hours) changed from 1.0 to 4.0

Upping the remaining time because we need another approach based on Tom's feedback.

Actions #3

Updated by Brett Smith almost 10 years ago

  • Status changed from New to In Progress
  • Start date set to 04/28/2014

This feature should simply hook into the functionality implemented in #2702.

Actions #4

Updated by Brett Smith almost 10 years ago

  • Remaining (hours) changed from 4.0 to 2.0

1904-workbench-reader-tokens-wip branch pushed for review.

Actions #5

Updated by Brett Smith almost 10 years ago

  • Status changed from In Progress to Resolved
  • % Done changed from 0 to 100
  • Remaining (hours) changed from 2.0 to 0.0

Applied in changeset arvados|commit:8dbf8bd4d53c200ca81494556326c03abae74581.

Actions

Also available in: Atom PDF