influxdata / influxdata/influxdb
Allow the OSS admin user to regenerate their root token
- Dominant language
- Rust
- Stars
- 31.7k
- Forks
- 3.7k
- Avg merge
- 13h 37m
- Merged PRs (30d)
- 8
Description
Since tokens cannot be changed, when we add new resources to the platform, the root token doesn't have access to it, even though the user has access to them. We need a way for an admin user to regenerate a new root token that has access to all the resources.
related:
https://github.com/influxdata/influxdb/issues/15961
https://github.com/influxdata/influxdb/issues/16120
Contributor guide
Research direction
No source file, test, or entry point is named. Start by reading related issues 15961 and 16120, then trace how root tokens are created and scoped. Done means an OSS admin can regenerate a root token with access to all resources without weakening other authorization rules.
Written by the indexing model from the issue text.
Assessment
- Domain
- authentication, authorization
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100