3644: API key for automation purposes

vlo****@gmai***** (Google Code) (Is this you? Claim this profile.)
Oct. 29, 2014 
What version are you running?
2.0.5


It would be nice if there was a mechanism whereby a user could have automation keys added.  API keys could be used to perform *most* actions except do things like add more API keys.  Thus the password could be done securely & a compromised API key could be revoked really easily.
#1 vlo****@gmai***** (Google Code) (Is this you? Claim this profile.) 
Also, I believe this removes the need for the username as well - the API key can uniquely & securely identify a username/password pair.
david
#2 david 
This is actually already done, and will ship in 2.1. We don't yet have all the docs written, but you can see some of it at https://www.reviewboard.org/docs/manual/dev/webapi/2.0/authenticating/#token-based-authentication
  • +Fixed
#3 vlo****@gmai***** (Google Code) (Is this you? Claim this profile.) 
Sweet.  Can't wait.