{"action":"created","issue":{"url":"https://api.github.com/repos/taskcluster/taskcluster-login/issues/9","repository_url":"https://api.github.com/repos/taskcluster/taskcluster-login","labels_url":"https://api.github.com/repos/taskcluster/taskcluster-login/issues/9/labels{/name}","comments_url":"https://api.github.com/repos/taskcluster/taskcluster-login/issues/9/comments","events_url":"https://api.github.com/repos/taskcluster/taskcluster-login/issues/9/events","html_url":"https://github.com/taskcluster/taskcluster-login/pull/9","id":134918277,"number":9,"title":"Immediately and unconditionally redirect to the tools site","user":{"login":"djmitche","id":28673,"avatar_url":"https://avatars.githubusercontent.com/u/28673?v=3","gravatar_id":"","url":"https://api.github.com/users/djmitche","html_url":"https://github.com/djmitche","followers_url":"https://api.github.com/users/djmitche/followers","following_url":"https://api.github.com/users/djmitche/following{/other_user}","gists_url":"https://api.github.com/users/djmitche/gists{/gist_id}","starred_url":"https://api.github.com/users/djmitche/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/djmitche/subscriptions","organizations_url":"https://api.github.com/users/djmitche/orgs","repos_url":"https://api.github.com/users/djmitche/repos","events_url":"https://api.github.com/users/djmitche/events{/privacy}","received_events_url":"https://api.github.com/users/djmitche/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":{"login":"jonasfj","id":149732,"avatar_url":"https://avatars.githubusercontent.com/u/149732?v=3","gravatar_id":"","url":"https://api.github.com/users/jonasfj","html_url":"https://github.com/jonasfj","followers_url":"https://api.github.com/users/jonasfj/followers","following_url":"https://api.github.com/users/jonasfj/following{/other_user}","gists_url":"https://api.github.com/users/jonasfj/gists{/gist_id}","starred_url":"https://api.github.com/users/jonasfj/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jonasfj/subscriptions","organizations_url":"https://api.github.com/users/jonasfj/orgs","repos_url":"https://api.github.com/users/jonasfj/repos","events_url":"https://api.github.com/users/jonasfj/events{/privacy}","received_events_url":"https://api.github.com/users/jonasfj/received_events","type":"User","site_admin":false},"milestone":null,"comments":2,"created_at":"2016-02-19T17:05:47Z","updated_at":"2016-02-19T22:38:45Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/taskcluster/taskcluster-login/pulls/9","html_url":"https://github.com/taskcluster/taskcluster-login/pull/9","diff_url":"https://github.com/taskcluster/taskcluster-login/pull/9.diff","patch_url":"https://github.com/taskcluster/taskcluster-login/pull/9.patch"},"body":"Rather than handle multiple cross-site authentications in the login\r\nsite, when the vast majority of users will be coming from tools.tc.net,\r\nimmediately redirect the user to the tools site.  That site can handle\r\nsharing credentials with other sites."},"comment":{"url":"https://api.github.com/repos/taskcluster/taskcluster-login/issues/comments/186436976","html_url":"https://github.com/taskcluster/taskcluster-login/pull/9#issuecomment-186436976","issue_url":"https://api.github.com/repos/taskcluster/taskcluster-login/issues/9","id":186436976,"user":{"login":"djmitche","id":28673,"avatar_url":"https://avatars.githubusercontent.com/u/28673?v=3","gravatar_id":"","url":"https://api.github.com/users/djmitche","html_url":"https://github.com/djmitche","followers_url":"https://api.github.com/users/djmitche/followers","following_url":"https://api.github.com/users/djmitche/following{/other_user}","gists_url":"https://api.github.com/users/djmitche/gists{/gist_id}","starred_url":"https://api.github.com/users/djmitche/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/djmitche/subscriptions","organizations_url":"https://api.github.com/users/djmitche/orgs","repos_url":"https://api.github.com/users/djmitche/repos","events_url":"https://api.github.com/users/djmitche/events{/privacy}","received_events_url":"https://api.github.com/users/djmitche/received_events","type":"User","site_admin":false},"created_at":"2016-02-19T22:38:45Z","updated_at":"2016-02-19T22:38:45Z","body":"The thing is, in most of those cases, it's a bad idea to use your full set of credentials -- you should be using a client with a much more limited set of scopes, instead.  This is why I wanted the ascii-armored credentials: you can just copy/paste them out of tools and into `sys.stdin.read()` for taskcluster-client.py, eliminating the whole run-a-local-webserver thing and all the complexity that goes with it.\r\n\r\nI'd like other sites to ask tools, rather than login, for access, again because it's a bad idea to grant your full set of scopes to other sites like that.\r\n\r\nI'll admit I've somewhat put the horse before the cart here, since none of this other support is in place yet, so I'll hold off on this until I've got some of that set up."}}