[PATCH 1/4] Add a api_login field

Pierre-Yves Chibon pingou at pingoured.fr
Tue Mar 12 07:10:21 UTC 2013


On Tue, 2013-03-12 at 03:07 -0400, Bohuslav Kabrda wrote:
> A question for this series. If I understand it correctly, the api_login is just another random generated string, right? Would you please elaborate a bit more on why having separate logins is good?

Yes it is, (with the addition that that the part before '##' is a
based64 of 'copr').
I think the basic idea here is to reduce even more the possibility of
brute force since one would have to do it for both the api token and the
username. Seth, do you see another interest for it?

It also seems to be the approach taken by cloud plateform and by oauth
system (if my understanding is correct).

Pierre



More information about the copr-devel mailing list