A user's ssh keys are not currently available throug the APIs

Bug #357235 reported by Tom Haddon
32
This bug affects 4 people
Affects Status Importance Assigned to Milestone
Launchpad itself
Fix Released
Low
Didier Roche-Tolomelli

Bug Description

I'd like to be able to retrieve a user's ssh keys using the APIs.

Curtis Hovey (sinzui)
Changed in launchpad-registry:
importance: Undecided → Low
status: New → Triaged
tags: added: feature
Jonathan Davies (jpds)
tags: added: api
Revision history for this message
William Grant (wgrant) wrote :

Ground Control would also like to be able to set them. I'm not sure if it's a good idea to allow setting of authentication tokens through the API, though.

Revision history for this message
Didier Roche-Tolomelli (didrocks) wrote :

doing it with jml's help :)

Changed in launchpad-registry:
assignee: nobody → Didier Roche (didrocks)
tags: added: quickly
Revision history for this message
Luke Faraone (lfaraone) wrote :

This is actually becoming a more urgent issue, since Launchpad's recent change to its login methods have resulted in bug 527978.

didrocks: are you planning to implement solely read-only parameters?

wgrant: From a user standpoint, shouldn't ssh keys be covered by "private data" that you give API applications access to? What better way should this be handled?

Revision history for this message
William Grant (wgrant) wrote :

Luke, I don't think so. If I grant an application access to private data, I can still later revoke all of its access with a couple of click. If that privilege level also allows the application to empower additional authentication tokens (SSH keys, OpenPGP keys, OAuth tokens, for example), I can no longer do that. A malicious application becomes much harder to stop.

Revision history for this message
Didier Roche-Tolomelli (didrocks) wrote :

FYI, my ssh key branch is now merged in trunk thanks to Michael Hudson. Not sure when we can see it in +apidoc on edge…

Changed in launchpad-registry:
status: Triaged → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.