{"action":"created","issue":{"url":"https://api.github.com/repos/jupyter/tmpnb/issues/189","labels_url":"https://api.github.com/repos/jupyter/tmpnb/issues/189/labels{/name}","comments_url":"https://api.github.com/repos/jupyter/tmpnb/issues/189/comments","events_url":"https://api.github.com/repos/jupyter/tmpnb/issues/189/events","html_url":"https://github.com/jupyter/tmpnb/issues/189","id":120850586,"number":189,"title":"Option to support a shared secret token auth scheme","user":{"login":"parente","id":153745,"avatar_url":"https://avatars.githubusercontent.com/u/153745?v=3","gravatar_id":"","url":"https://api.github.com/users/parente","html_url":"https://github.com/parente","followers_url":"https://api.github.com/users/parente/followers","following_url":"https://api.github.com/users/parente/following{/other_user}","gists_url":"https://api.github.com/users/parente/gists{/gist_id}","starred_url":"https://api.github.com/users/parente/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/parente/subscriptions","organizations_url":"https://api.github.com/users/parente/orgs","repos_url":"https://api.github.com/users/parente/repos","events_url":"https://api.github.com/users/parente/events{/privacy}","received_events_url":"https://api.github.com/users/parente/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":7,"created_at":"2015-12-07T19:39:34Z","updated_at":"2015-12-07T20:31:03Z","closed_at":null,"body":"Right now, the tmpnb spawn, stats, etc. end points are wide open for anyone to request access to a new container. This is great for open deployments, not so great for cases where only certain actors should be allowed to request containers. An optional API key scheme would do the trick here. I suggest keeping with what we did in jupyter-incubator/kernel_gateway#3, generate a single shared token on startup, log it,  require it in the form:\r\n\r\n```\r\nAuthorization: token <the api key>\r\n```\r\n\r\nI'll probably wind up tackling this in a PR. Opening it so I don't forget. Did discuss it briefly with @rgbkrk "},"comment":{"url":"https://api.github.com/repos/jupyter/tmpnb/issues/comments/162651945","html_url":"https://github.com/jupyter/tmpnb/issues/189#issuecomment-162651945","issue_url":"https://api.github.com/repos/jupyter/tmpnb/issues/189","id":162651945,"user":{"login":"rgbkrk","id":836375,"avatar_url":"https://avatars.githubusercontent.com/u/836375?v=3","gravatar_id":"","url":"https://api.github.com/users/rgbkrk","html_url":"https://github.com/rgbkrk","followers_url":"https://api.github.com/users/rgbkrk/followers","following_url":"https://api.github.com/users/rgbkrk/following{/other_user}","gists_url":"https://api.github.com/users/rgbkrk/gists{/gist_id}","starred_url":"https://api.github.com/users/rgbkrk/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rgbkrk/subscriptions","organizations_url":"https://api.github.com/users/rgbkrk/orgs","repos_url":"https://api.github.com/users/rgbkrk/repos","events_url":"https://api.github.com/users/rgbkrk/events{/privacy}","received_events_url":"https://api.github.com/users/rgbkrk/received_events","type":"User","site_admin":false},"created_at":"2015-12-07T20:31:03Z","updated_at":"2015-12-07T20:31:03Z","body":"Ok, reading over, that's the case here."}}