{"action":"created","issue":{"url":"https://api.github.com/repos/rundeck/rundeck/issues/1739","repository_url":"https://api.github.com/repos/rundeck/rundeck","labels_url":"https://api.github.com/repos/rundeck/rundeck/issues/1739/labels{/name}","comments_url":"https://api.github.com/repos/rundeck/rundeck/issues/1739/comments","events_url":"https://api.github.com/repos/rundeck/rundeck/issues/1739/events","html_url":"https://github.com/rundeck/rundeck/issues/1739","id":139386526,"number":1739,"title":"hide security token in api call","user":{"login":"SydOps","id":8954908,"avatar_url":"https://avatars.githubusercontent.com/u/8954908?v=3","gravatar_id":"","url":"https://api.github.com/users/SydOps","html_url":"https://github.com/SydOps","followers_url":"https://api.github.com/users/SydOps/followers","following_url":"https://api.github.com/users/SydOps/following{/other_user}","gists_url":"https://api.github.com/users/SydOps/gists{/gist_id}","starred_url":"https://api.github.com/users/SydOps/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/SydOps/subscriptions","organizations_url":"https://api.github.com/users/SydOps/orgs","repos_url":"https://api.github.com/users/SydOps/repos","events_url":"https://api.github.com/users/SydOps/events{/privacy}","received_events_url":"https://api.github.com/users/SydOps/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":4,"created_at":"2016-03-08T20:34:07Z","updated_at":"2016-08-03T14:19:24Z","closed_at":null,"body":"I set API call to run a job easily via `curl` command with `argString` \r\n\r\n~~~\r\ncurl -s -H 'X-Rundeck-Auth-Token: <RUNDECK_TOKEN>'\r\n--data-urlencode \"argString=-arg1 STRING \"\r\nhttp://localhost:4440/16/job/ebaed1f0-7b94-4a3b-8cf9-d26c21bbedaa/run\r\n~~~\r\n\r\n The command will be run by a robot account, I need checkin it to Git/stash.\r\n\r\nThe rundeck token has admin permission, that I need find a way to hide it.  Can we have some functions same as AWS STS service to generate temporary security token?\r\n\r\nAny other suggestion?"},"comment":{"url":"https://api.github.com/repos/rundeck/rundeck/issues/comments/237250183","html_url":"https://github.com/rundeck/rundeck/issues/1739#issuecomment-237250183","issue_url":"https://api.github.com/repos/rundeck/rundeck/issues/1739","id":237250183,"user":{"login":"ak0ska","id":2640166,"avatar_url":"https://avatars.githubusercontent.com/u/2640166?v=3","gravatar_id":"","url":"https://api.github.com/users/ak0ska","html_url":"https://github.com/ak0ska","followers_url":"https://api.github.com/users/ak0ska/followers","following_url":"https://api.github.com/users/ak0ska/following{/other_user}","gists_url":"https://api.github.com/users/ak0ska/gists{/gist_id}","starred_url":"https://api.github.com/users/ak0ska/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ak0ska/subscriptions","organizations_url":"https://api.github.com/users/ak0ska/orgs","repos_url":"https://api.github.com/users/ak0ska/repos","events_url":"https://api.github.com/users/ak0ska/events{/privacy}","received_events_url":"https://api.github.com/users/ak0ska/received_events","type":"User","site_admin":false},"created_at":"2016-08-03T14:19:23Z","updated_at":"2016-08-03T14:19:23Z","body":"What we do is to have an Apache proxy for the API usage, and the proxy applies a rewrite rule to inject the token locally before forwarding the query to Rundeck. "}}
{"actor":{"display_login":"ak0ska"}}