Diff for "LEP/SSH_OAuth"

Not logged in - Log In / Register
Differences between revisions 1 and 2
⇤ ← Revision 1 as of 2011-09-28 03:02:28 →
Size: 4760
Editor: mbp
Comment:
← Revision 2 as of 2011-09-28 03:04:01 → ⇥
Size: 5577
Editor: mbp
Comment:
Deletions are marked like this. Additions are marked like this.
Line 30: Line 30:
 * users who previously had trouble with ssh -- see [[https://answers.launchpad.net/launchpad/+questions?field.search_text=ssh&field.sort=RELEVANCY&field.sort-empty-marker=1&field.actions.search=Search&field.language=en&field.language-empty-marker=1&field.status=OPEN&field.status=NEEDSINFO&field.status=ANSWERED&field.status=SOLVED&field.status-empty-marker=1||questions]], [[https://bugs.launchpad.net/launchpad/+bugs?field.searchtext=ssh&orderby=-importance&search=Search&field.status%3Alist=NEW&field.status%3Alist=INCOMPLETE_WITH_RESPONSE&field.status%3Alist=INCOMPLETE_WITHOUT_RESPONSE&field.status%3Alist=CONFIRMED&field.status%3Alist=TRIAGED&field.status%3Alist=INPROGRESS&field.status%3Alist=FIXCOMMITTED&field.assignee=&field.bug_reporter=&field.omit_dupes=on&field.has_patch=&field.has_no_package=|bugs]]

Talk to the product strategist soon after cutting a first draft of this document

SSH OAuth Authentication

Rather than creating and uploading an SSH key, you can authenticate your bzr client using the web ui.

Contact: Martin Pool
On Launchpad: bug tag ssh-oauth

Consider clarifying the feature by describing what it is not?

Rationale

  • Creating and managing SSH keys is a noticeable (not overwhelming) source of friction for users especially for those on Windows or new to Unix development. It also creates some support burden for Launchpad staff.

  • People would like to make semi-trusted robots that have access to private branches, or that can write to branches, but that don't get full access to the user's account.

Stakeholders

Who really cares about this feature? When did you last talk to them?

User stories

New developer without a key

As a developer new to working on Ubuntu
I want to just get a checkout of a Launchpad branch without futzing with ssh and key files
so that I can branch the code and contribute changes

Delegated to robot

As a person managing an external auto-build service
I want to give it access to branch and push back changes, without giving it my real private key
So that I can get the robot going, with less risk if the build machine is compromised.

I may want the token given to the robot to expire after a certain period of time (say 24h).

Launchpad developer

As a Launchpad developer
I want to start an ec2 instance that can pull from Launchpad over ssh, without giving it my real key
So that I can land my changes without trusting my key to a random external machine Have as many as you like. Group user stories together into meaningfully deliverable units. They'll be used as the driving elements of exploratory testing QA.

Constraints and Requirements

Must

  • Allow logins without manually configuring a key.
  • Continue using encrypted SSH as the transport.

Nice to have

  • Running lp-login should automatically take you into generating a token or perhaps even registering an account.
  • Tokens auto expire after a period of time, as they can with OAuth tokens at the moment.
  • Consistent or integrated with existing OAuth ui.

Must not

  • Require code changes to the SSH client, which would be infeasible to put into OpenSSH and Putty; requiring everyone to use bzr paramiko might be hard.
  • Open security vulnerabilities.

Out of scope

  • Anonymous-SSH access?
  • General delegated-token or impersonation enhancements (though they would be nice):
    • Audit trail showing when and why tokens were issued and when they were used.
    • A means to limit access of a particular token to particular projects or actions.

Subfeatures

Other LaunchpadEnhancementProposals that form a part of this one.

Success

How will we know when we are done?

  • Running bzr lp-login (or perhaps even just branching from lp:), when you already have a Launchpad account, will authenticate you to Launchpad without requiring any manual setup of keys.

How will we measure how well we have done?

  • This works reliably on all platforms.
  • User questions about the topic decrease.
  • The user experience for setup has a small number of steps and it is hard to have them go wrong.

Thoughts?

Put everything else here. Better out than in.

  • github may have something like this? needs research?

Implementation ideas

  1. Generate a symmetric OAuth token; send that as a cleartext password; store it in bazaar's authentication.conf or in the keyring.
    • If using an external SSH, how will it be passed across?
    • Should it be stored just unencrypted, or in the system keyring, or elsewhere?
  2. Generate an SSH key automatically when logging in and add it to Launchpad.

LEP/SSH_OAuth (last edited 2011-10-25 05:40:20 by mbp)