onelson / estuary

33 stars 8 forks source link

Quick and dirty authentication #28

Closed rickwebiii closed 2 years ago

rickwebiii commented 2 years ago

Add the capability to set an auth token either via environment variable or command line. Users attempting to publish, yank, or unyank must present this token (i.e. run cargo login and paste the token verbatim).

This is mostly useful for folks that want to run a private registry so they can share packages, but only the owners can publish packages.

Command lines aren't the greatest way to pass credentials, as they appear in top, ps etc., so you'll need to ensure you aren't running the registry on a shared machine.