Task #2663
closed
Idea #1904: User can get a no-auth-required link to an Arvados object, i.e., turn on "anyone with the link can view" permission
Workbench supports a "temporary API token" query parameter everywhere
Added by Brett Smith about 10 years ago.
Updated almost 10 years ago.
Description
When provided, Workbench uses the API token to make any API server requests. However, unlike the current api_token behavior, Workbench does not set up or change the current user session based on this token.
- Remaining (hours) changed from 6.0 to 1.0
Done in 1904-workbench-temp-token-wip, awaiting review. The new parameter is called api_ticket; a ticket is like a token, except you can only use it once.
- Remaining (hours) changed from 1.0 to 4.0
Upping the remaining time because we need another approach based on Tom's feedback.
- Status changed from New to In Progress
- Start date set to 04/28/2014
This feature should simply hook into the functionality implemented in #2702.
- Remaining (hours) changed from 4.0 to 2.0
1904-workbench-reader-tokens-wip branch pushed for review.
- Status changed from In Progress to Resolved
- % Done changed from 0 to 100
- Remaining (hours) changed from 2.0 to 0.0
Applied in changeset arvados|commit:8dbf8bd4d53c200ca81494556326c03abae74581.
Also available in: Atom
PDF
Updated by