Demo of CLI client OAuth

SURFnet / surf-token-based-access

1 stars 1 forks source link

Demo of CLI client OAuth #68

Closed michielbdejong closed 2 weeks ago

michielbdejong commented 4 weeks ago

Split out from #67

This demo (which I'm preparing for the 10 June meeting with SRAM) should show:

how Heroku (and npm) do it now
can we do better? Yes: send a short-lived derived token over the wire, bound to a secret that stays on the client
or even: store this secret in SRC rather than on the VM!

michielbdejong commented 4 weeks ago

We should discuss the option of the CLI tool opening an SRC URL. Log in to SRC using SURFConext? Token management system there, linking with with /root/.netrc on the VM