justin/provenance
1
0
Fork 0
Code Issues 173 Pull Requests Actions Packages Projects Releases Wiki Activity

Public read-only API + scoped tokens (OAuth) #186

New Issue
Open
opened 2026-06-09 11:28:07 -04:00 by justin · 0 comments
justin commented 2026-06-09 11:28:07 -04:00
Owner
Copy Link
Copy Source

Status: partial · Importance: High · Effort: L · Phase: 5–6

Bearer token is opaque session only; TokenPurpose lacks scopes; designed public.py never built.

Non-negotiable: Any scoped-token path routes through person_visibility + living-person redaction (NN#2/#3).

Area: API & extensibility · P1 / should-have. From the product backlog gap analysis (docs/BACKLOG.md).

**Status:** partial · **Importance:** High · **Effort:** L · **Phase:** 5–6 Bearer token is opaque session only; `TokenPurpose` lacks scopes; designed `public.py` never built. **Non-negotiable:** Any scoped-token path routes through `person_visibility` + living-person redaction (NN#2/#3). --- _Area: API & extensibility · P1 / should-have. From the product backlog gap analysis (docs/BACKLOG.md)._
justin added the type:securitypriority:P1moscow:shouldarea:apistatus:partial labels 2026-06-09 11:28:07 -04:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
area:ai
Area: ai
 area:api
Area: api
 area:charts
Area: charts
 area:collaboration
Area: collaboration
 area:dna
Area: dna
 area:i18n
Area: i18n
 area:maps
Area: maps
 area:media
Area: media
 area:mobile
Area: mobile
 area:performance
Area: performance
 area:privacy
Area: privacy
 area:property
Area: property
 area:research
Area: research
 area:search
Area: search
 area:sources
Area: sources
 area:standards
Area: standards
 area:tree
Area: tree
 blocked
Blocked on a prerequisite
 moscow:must
Must have
 moscow:nice
Nice to have
 moscow:should
Should have
 parked
Deliberately deferred
 priority:P0
Critical — do first
 priority:P1
High
 priority:P2
Medium / lower
 status:missing
Not built
 status:partial
Partly built
 status:planned
On roadmap, not built
 type:bug
Bug
 type:chore
Docs / infra / conformance
 type:feature
Feature
 type:security
Security / correctness
No Label area:api moscow:should priority:P1 status:partial type:security
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
justin (Justin Paul)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: justin/provenance#186
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?