fedrepo-req, the new CLI tool for requesting dist-git repos and branches, requires a pagure identification token in order to work.
This seems a bit unfortunate to me, especially we recently switched over to Kerberos authentication for other parts of Fedora. I can kinit and then submit builds to koji; it is a little annoying to need an entirely separate authentication token from pagure in order to request packages and branches. The annoyance is then further compounded by the fact that the pagure auth token needs to be renewed every couple of months; it just adds another thing that a packager needs to keep track of.
Therefore, if it were possible to use kerberos to auth to pagure (or to the pagure API?), it would be extremely convenient.
(See also #84 on fedrepo_req, which I filed before being told to bring this here).
I don't know about rest of the things but, for api tokens you should get emails for api token expiry. (5 days left to expire, 3 days left to expire, 1 day left to expire)
That's helpful. But needing a separate API token at all (which currently has to be manually fetched from the website and inserted into a configuration file) still feels like something that shouldn't be necessary when we have Kerberos.
Metadata Update from @pingou: - Issue tagged with: RFE
I believe the idea would be to add OpenID Connect support rather than kerberos but pagure should be able to support different authentication mechanism/system and if someone wants to work on this I would be willing to make the adjustments if any are needed.
Metadata Update from @pingou: - Issue tagged with: wishful
no update / progress in 5 years, adding further auth systems is already in the 6.0 milestone, going to close this issue.
Metadata Update from @wombelix: - Issue close_status updated to: Won't Fix - Issue status updated to: Closed (was: Open)