-
Bug
-
Resolution: Unresolved
-
Normal
-
None
-
quay-v3.7.0
-
False
-
None
-
False
With generated oauth token I can query the api.
Depending on which information I want to query, the scope of the token is crucial.
Attached are some queries with the token scopes on top.
token.txt)
$ curl -k -X GET -H "Authorization: Bearer $TOKEN" -H 'Content-Type: application/json' https://$QUAY_SERVER/api/v1/organization/$ORGA_NAME/quota|jq
This works fine with super:user, org:admin and repo:create but NOT with repo:admin!
token2.txt)
curl -k -X GET -H "Authorization: Bearer $TOKEN" -H 'Content-Type: application/json' https://$QUAY-SERVER/api/v1/organization/$ORGA-NAME/quota/11/limit|jq
This works with org:admin but NOT with super:user!
I don't think this is intentional
Tested on quay v3.7.3