posit-dev / posit-dev/connectapi
Assume Viewer Credentials when running on Connect
Nobody has claimed this yet.
- Dominant language
- R
- Stars
- 54
- Forks
- 27
- Avg merge
- 1d 3m
- Merged PRs (30d)
- 1
Description
The general expectation when running applications on Connect is that the application is running using the visitor's credentials. This is not the current behavior. Instead, connectapi uses the CONNECT_API_KEY variable, which belongs to the content owner, not the visitor.
Therefore, the default behavior should be as follows:
When running on Connect, assume that a visitor integration is configured. If the integration is not set, provide a sensible error message that directs the user to create the integration or explicitly overrides this behavior. When the integration is set, it assumes the visitor's credentials via the HTTP header.
When running off Connect, assume the current behavior (e.g., CONNECT_API_KEY is set).
(Sibling issue to https://github.com/posit-dev/posit-sdk-py/issues/398)
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by tracing how connectapi currently reads CONNECT_API_KEY and detects whether it is running on Connect. Then inspect how visitor integration credentials are passed through the HTTP header; done means Connect defaults to visitor credentials, reports a useful missing-integration error or supports an explicit override, and off-Connect behavior remains unchanged.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- r
- Domain
- api, authentication
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100