[PATCH 1/4] Add a api_login field
Pierre-Yves Chibon
pingou at pingoured.fr
Tue Mar 12 07:10:21 UTC 2013
On Tue, 2013-03-12 at 03:07 -0400, Bohuslav Kabrda wrote:
> A question for this series. If I understand it correctly, the api_login is just another random generated string, right? Would you please elaborate a bit more on why having separate logins is good?
Yes it is, (with the addition that that the part before '##' is a
based64 of 'copr').
I think the basic idea here is to reduce even more the possibility of
brute force since one would have to do it for both the api token and the
username. Seth, do you see another interest for it?
It also seems to be the approach taken by cloud plateform and by oauth
system (if my understanding is correct).
Pierre
More information about the copr-devel
mailing list