Print

Print


> The way you would do it is to place the token on the url in the standard way:
> xroot;//host//my/path?authz=[brearer%20]

But this doesn't really work, does it?  You can't put secrets into the command line because they are visible across the system.  One would need to re-implement the token discovery logic external to the ZTN library and put it in `xrdcp` and `XrdCl` to have it auto-discover the token and/or have the user explicitly provide a token file.

Secondly, this doesn't work because the above invocation is only safe when TLS is used on the transport layer.  Again, this is only known at the XrdCl level and not a priori by the individual invoking the client.


-- 
Reply to this email directly or view it on GitHub:
https://github.com/xrootd/xrootd/issues/1584#issuecomment-1053698436
You are receiving this because you commented.

Message ID: <[log in to unmask]>

########################################################################
Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-DEV list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1