RFE: Support Token Scoping
@aKlimau is already working on this.
Since Sep 16, 2026.
Assessment
This issue has not been assessed yet.
Description
It might make sense to support "token scoping" such that API tokens are model - only capable of individual actions like push, yank, etc. This makes sense when you want to hand out a lower degree of access.
Can be deferred though, not an immediate concern.
Add scope fields to CargoToken:
distributions— M2M toRustDistribution(empty = all the user has access to)actions— JSON list of allowed actions (["publish", "yank"], empty = all)
This mirrors crates.io's RFC 2947 token scoping.
- Dominant language
- Python
- Stars
- 1
- Forks
- 5
- Avg merge
- 3d 17h
- Merged PRs (30d)
- 5
Getting set up
- No Dockerfile or Docker Compose file
- Has a pull request template
- Read the contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from pulp/pulp_rust
-
Feature Triage-Needed
Difficulty 5/5 Over a week Newbie friendliness 35/100
-
Feature Triage-Needed
Difficulty 5/5 Over a week Newbie friendliness 35/100
-
Feature Triage-Needed
Difficulty 2/5 1-3 hours Newbie friendliness 52/100
Similar issues
-
comp/tools duplicate P2 sweeper:risk-compatibility tool/mcp type/bug
Difficulty 1/5 Under an hour Newbie friendliness 88/100
NousResearch/hermes-agent#132042 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
deepset-ai/haystack#13092 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 86/100
EverMind-AI/Raven#845 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
AstrBotDevs/AstrBot#10340 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
BasedHardware/omi#20401 · 1 comment ·
Maintainers usually reply within 1 day