Skip to content

Allow passing PAT name and scopes via the URL

What does this MR do?

GitHub allows URLs to pre-fill in parts of the Personal Access Token form. This allows projects like Composer to prompt users with a link that pre-selects the scopes required by the tool without users having to guess.

This MR adds a similar functionality to the GitLab Personal Access Tokens for a user (i.e. the https://gitlab.com/-/profile/personal_access_tokens page).

Only 2 parameters are supported for now, name and scopes.

Screenshots (strongly suggested)

image

Does this MR meet the acceptance criteria?

Conformity

Availability and Testing

Security

Does this MR contain changes to processing or storing of credentials or tokens, authorization and authentication methods or other items described in the security review guidelines? If not, then delete this Security section.

  • Label as security and @ mention @gitlab-com/gl-security/appsec
  • The MR includes necessary changes to maintain consistency between UI, API, email, or other methods
  • Security reports checked/validated by a reviewer from the AppSec team

Closes #334664 (closed)

Edited by Marcin Sedlak-Jakubowski

Merge request reports

Loading