Hacktoberfest 2026: the issues maintainers tagged for October, open and beginner-friendly. Browse Hacktoberfest issues

RFE: Support Token Scoping

Open
#48 0 comments 0 reactions 1 assignee View on GitHub

@aKlimau is already working on this.

Since Sep 16, 2026.

Assessment

This issue has not been assessed yet.

Description

Feature Triage-Needed

It might make sense to support "token scoping" such that API tokens are model - only capable of individual actions like push, yank, etc. This makes sense when you want to hand out a lower degree of access.

Can be deferred though, not an immediate concern.


Add scope fields to CargoToken:

  • distributions — M2M to RustDistribution (empty = all the user has access to)
  • actions — JSON list of allowed actions (["publish", "yank"], empty = all)

This mirrors crates.io's RFC 2947 token scoping.

Dominant language
Python
Stars
1
Forks
5
Avg merge
3d 17h
Merged PRs (30d)
5

Getting set up

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from pulp/pulp_rust

All issues in pulp/pulp_rust

Similar issues

More Python issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.