Provide a way for non-browser clients to get an authenticated connection
Categories
(Cloud Services :: Server: Remote Settings, task, P2)
Tracking
(Not tracked)
People
(Reporter: standard8, Assigned: leplatrem)
Details
With the search-config bucket on remote settings, we're typically using an upload script quite frequently to upload a configuration.
Currently we have to sign into staging or prod, and manually copy the authentication header to the script.
It would be nicer if we could do this automatically. Taskcluster have scripts that you can run from the command line which will open up the browser, let you sign in, then return the authentication token to the command line app.
I don't know if this just needs changes to our scripts, or if we need server side changes as well.
Assignee | ||
Comment 1•4 years ago
|
||
Taskcluster have scripts that you can run from the command line which will open up the browser, let you sign in, then return the authentication token to the command line app.
Apparently it just consists in spawning a local HTTP server and a browser at http://localhost
that will go through the OAuth dance.
If I remember correctly, localhost should be among the allowed hosts for the OAuth dance on Remote Settings, so we should be able to do the mimic TaskCluster signin CLI tool.
Assignee | ||
Updated•4 years ago
|
Assignee | ||
Comment 2•4 years ago
|
||
See also what the blocklist team has been doing: https://github.com/kewisch/mozblocklist/blob/6d7e0d1be9877dd9a40e7c02c4aba008b8412eee/src/kinto-client.js#L98-L119
Description
•