Closed Bug 1239632 Opened 9 years ago Closed 9 years ago

taskcluster-proxy: bewit support via authorized scopes

Categories

(Taskcluster :: General, defect)

Product:
Taskcluster
Component:
General
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED FIXED

People

(Reporter: pmoore, Unassigned)

Details

*Low priority* - use cases to be established Support generation of signed urls via taskcluster proxy endpoint that uses authorized scopes to ensure no privilege escalation opportunity for tasks. Implementation should use https://godoc.org/github.com/taskcluster/taskcluster-client-go/tcclient#ConnectionData.SignedURL Probably makes sense at the time of implementing to move taskcluster-proxy over to using github.com/taskcluster/taskcluster-client-go/tcclient package for all its endpoints. At the time the proxy was written, this library didn't exist, which is why it is currently not used - however, maintaining separate implementations as we do now is a bad idea.
This was added in bug 1235399
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.