{"action":"created","issue":{"url":"https://api.github.com/repos/Kinto/kinto/issues/1466","repository_url":"https://api.github.com/repos/Kinto/kinto","labels_url":"https://api.github.com/repos/Kinto/kinto/issues/1466/labels{/name}","comments_url":"https://api.github.com/repos/Kinto/kinto/issues/1466/comments","events_url":"https://api.github.com/repos/Kinto/kinto/issues/1466/events","html_url":"https://github.com/Kinto/kinto/pull/1466","id":292526376,"number":1466,"title":"HAWK request authentication plugin.  Relies on the account plugin for","user":{"login":"TDress","id":4712201,"avatar_url":"https://avatars3.githubusercontent.com/u/4712201?v=4","gravatar_id":"","url":"https://api.github.com/users/TDress","html_url":"https://github.com/TDress","followers_url":"https://api.github.com/users/TDress/followers","following_url":"https://api.github.com/users/TDress/following{/other_user}","gists_url":"https://api.github.com/users/TDress/gists{/gist_id}","starred_url":"https://api.github.com/users/TDress/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/TDress/subscriptions","organizations_url":"https://api.github.com/users/TDress/orgs","repos_url":"https://api.github.com/users/TDress/repos","events_url":"https://api.github.com/users/TDress/events{/privacy}","received_events_url":"https://api.github.com/users/TDress/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-01-29T19:15:04Z","updated_at":"2018-02-02T17:26:20Z","closed_at":null,"author_association":"CONTRIBUTOR","pull_request":{"url":"https://api.github.com/repos/Kinto/kinto/pulls/1466","html_url":"https://github.com/Kinto/kinto/pull/1466","diff_url":"https://github.com/Kinto/kinto/pull/1466.diff","patch_url":"https://github.com/Kinto/kinto/pull/1466.patch"},"body":"storing secret, and the account user ID is used as the client ID.\r\nAccount creation triggers a secret to be generated and exposed to the\r\nuser.\r\n\r\nFixes #\r\n\r\n- [ ] Add documentation.\r\n- [ ] Add tests.\r\n- [ ] Add a changelog entry.\r\n- [ ] Add your name in the contributors file.\r\n- [ ] If you changed the HTTP API, update the [API_VERSION](https://github.com/Kinto/kinto/blob/master/kinto/__init__.py#L15) constant and add an API changelog entry [in the docs](https://github.com/Kinto/kinto/blob/master/docs/api/index.rst)\r\n- [ ] If you added a new configuration setting, update the [`kinto.tpl`](https://github.com/Kinto/kinto/blob/master/kinto/config/kinto.tpl) file with it.\r\n"},"comment":{"url":"https://api.github.com/repos/Kinto/kinto/issues/comments/362649687","html_url":"https://github.com/Kinto/kinto/pull/1466#issuecomment-362649687","issue_url":"https://api.github.com/repos/Kinto/kinto/issues/1466","id":362649687,"user":{"login":"TDress","id":4712201,"avatar_url":"https://avatars3.githubusercontent.com/u/4712201?v=4","gravatar_id":"","url":"https://api.github.com/users/TDress","html_url":"https://github.com/TDress","followers_url":"https://api.github.com/users/TDress/followers","following_url":"https://api.github.com/users/TDress/following{/other_user}","gists_url":"https://api.github.com/users/TDress/gists{/gist_id}","starred_url":"https://api.github.com/users/TDress/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/TDress/subscriptions","organizations_url":"https://api.github.com/users/TDress/orgs","repos_url":"https://api.github.com/users/TDress/repos","events_url":"https://api.github.com/users/TDress/events{/privacy}","received_events_url":"https://api.github.com/users/TDress/received_events","type":"User","site_admin":false},"created_at":"2018-02-02T17:26:20Z","updated_at":"2018-02-02T17:26:20Z","author_association":"CONTRIBUTOR","body":"Thanks @leplatrem and @Natim  for the granular feedback on these PRs!  I'm enjoying the learning experience and would love to bring this all the way to fruition.  I'm going to get another PR ready with more progress.\r\nJust to be clear that the design is on the right track: we are essentially wrapping the account plugin with a new hawk auth policy.  Kinto uses account IDs as hawk client IDs and generates secrets stored on account records.  The secrets are exposed to the account user when doing a GET account (and when creating account).  @Natim seemed to have some ideas about how to \"rotate\" secrets.  \r\n"}}
{"actor":{"display_login":"TDress"}}