Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Endpoint /admin/accounts/create をアクセストークンから使用出来るように欲しい #14959

Open
1 task done
eternal-flame-AD opened this issue Nov 14, 2024 · 0 comments · May be fixed by #14989
Open
1 task done

Endpoint /admin/accounts/create をアクセストークンから使用出来るように欲しい #14959

eternal-flame-AD opened this issue Nov 14, 2024 · 0 comments · May be fixed by #14989
Assignees
@eternal-flame-AD
Labels
🧩API Interface between server and client ✨Feature This adds/improves/enhances a feature packages/backend Server side specific issue/PR

Comments

@eternal-flame-AD
Copy link
Contributor

Summary

write:admin:create-account permission がサーポートしてほしい。

Purpose

正当な自動化でユーザーを作成場合は何だかあると思います？　例えば

  • ステージング環境の E2E/Performance regression/Spam test
  • Misskeyシステム以外のカスタムディレクトリ (OAuth proxy, LDAP, etc.)

セキュリティ方面はAdmin権限があるユーザーは信頼レベルは極めて高いので、アカウントが自動化作成はアタックベクターであるそうとは言えないと思います。

Ref impl: https://forge.yumechi.jp/yume/yumechi-no-kuni/commit/738877016ceb50d404e66d35f149140d3909220f

Example Script: https://forge.yumechi.jp/yume/yumechi-no-kuni/commit/60eb7e1dc94d2abcf0f3767272d324b4e71e1c43

Do you want to implement this feature yourself?

  • Yes, I will implement this by myself and send a pull request
@eternal-flame-AD eternal-flame-AD added the ✨Feature This adds/improves/enhances a feature label Nov 14, 2024
@KisaragiEffective KisaragiEffective changed the title Endpoint /admin/accounts/create がアクセストークンで使用出来るように欲しい Endpoint /admin/accounts/create をアクセストークンから使用出来るように欲しい Nov 16, 2024
@KisaragiEffective KisaragiEffective added 🧩API Interface between server and client packages/backend Server side specific issue/PR labels Nov 16, 2024
@eternal-flame-AD eternal-flame-AD linked a pull request Nov 18, 2024 that will close this issue
Open
5 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@eternal-flame-AD eternal-flame-AD

Labels
🧩API Interface between server and client ✨Feature This adds/improves/enhances a feature packages/backend Server side specific issue/PR
Projects
None yet
Milestone
No milestone
2 participants
@eternal-flame-AD @KisaragiEffective