influxdata / influxdata/influxdb

Tokens scoped to invokable scripts

Open
#23,613 0 comments 0 reactions 0 assignees View on GitHub
area/auth kind/feature-request team/edge
Dominant language
Rust
Stars
31.7k
Forks
3.7k
Avg merge
13h 37m
Merged PRs (30d)
8

Description

__Proposal:__
Allow users to create tokens that have read, write permissions and allow you to create and delete invokable scripts. In the case where they're only using invokable scripts to query certain buckets (not using scripts in conjunction with the http package to call additional API endpoints and create other resources).
__Current behavior:__
User must use an all-access token.

__Desired behavior:__
Enable users to use scripts so multiple dev teams can query last data points with bucket/measurement as parameters. Without giving them the power of an all token.

From this post:
https://community.influxdata.com/t/custom-api-and-tokens/26065

Contributor guide

Open the contributing guide

Research direction

No file, test, or entry point is named. Start with the proposal and its linked community post, then determine how scoped read/write permissions should cover invokable script creation and deletion. Done means users can query permitted buckets and measurements through scripts without an all-access token.

Written by the indexing model from the issue text.

Assessment

Domain
authentication, authorization
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.