You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
None of these materially change the proposal, but clarify its meaning
* fix PR link in header
* remove command-line logins as a requirement (since it's not met)
* remove mention of temporary credentials in "big picture"
* include a sentence confirming that the resulting credentials are not temporary (this was already implicit)
@@ -59,7 +59,6 @@ The page presents the requested information to the user for consent, and then re
59
59
60
60
## Requirements
61
61
62
-
* Support command-line logins
63
62
* Support third-party logins
64
63
* Support issuing limited-authorization credentials
65
64
* Support whitelisting some third parties
@@ -78,7 +77,7 @@ The result is similar to a normal OAuth authorization-code flow, but resulting i
78
77
## Implementation
79
78
80
79
The "big picture" here is that a Taskcluster deployment acts as an OAuth2 authorization server and resource server.
81
-
The "resource" that the deployment protects is temporary Taskcluster credentials.
80
+
The "resource" that the deployment protects is Taskcluster credentials.
82
81
Thus a client carries out a standard OAuth2 authorization transaction, then uses the resulting `access_token` to request Taskcluster credentials as needed.
83
82
84
83
The deviations from OAuth2 are as follows:
@@ -213,6 +212,8 @@ The client indicated in the credentials has the clientId described above, and as
213
212
It will be automatically disabled if the user's access no longer satisfies its scopes.
214
213
The client can also be disabled or deleted manually in the event of compromise.
215
214
215
+
This endpoint does not produce temporary credentials, as such credentials are not revocable.
216
+
216
217
## Transition Period
217
218
218
219
The new flow proposed here will be implemented on the new deployment scheduled to go into production in September 2019.
0 commit comments