{"action":"created","issue":{"url":"https://api.github.com/repos/docker/docker/issues/10414","labels_url":"https://api.github.com/repos/docker/docker/issues/10414/labels{/name}","comments_url":"https://api.github.com/repos/docker/docker/issues/10414/comments","events_url":"https://api.github.com/repos/docker/docker/issues/10414/events","html_url":"https://github.com/docker/docker/pull/10414","id":55771220,"number":10414,"title":"Proposal: Remote API authorization","user":{"login":"calavera","id":1050,"avatar_url":"https://avatars.githubusercontent.com/u/1050?v=3","gravatar_id":"","url":"https://api.github.com/users/calavera","html_url":"https://github.com/calavera","followers_url":"https://api.github.com/users/calavera/followers","following_url":"https://api.github.com/users/calavera/following{/other_user}","gists_url":"https://api.github.com/users/calavera/gists{/gist_id}","starred_url":"https://api.github.com/users/calavera/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/calavera/subscriptions","organizations_url":"https://api.github.com/users/calavera/orgs","repos_url":"https://api.github.com/users/calavera/repos","events_url":"https://api.github.com/users/calavera/events{/privacy}","received_events_url":"https://api.github.com/users/calavera/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/docker/docker/labels//project/doc","name":"/project/doc","color":"207de5"},{"url":"https://api.github.com/repos/docker/docker/labels/1-design-review","name":"1-design-review","color":"fef2c0"},{"url":"https://api.github.com/repos/docker/docker/labels/Proposal","name":"Proposal","color":"009800"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":4,"created_at":"2015-01-28T15:36:06Z","updated_at":"2015-03-17T00:16:15Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/docker/docker/pulls/10414","html_url":"https://github.com/docker/docker/pull/10414","diff_url":"https://github.com/docker/docker/pull/10414.diff","patch_url":"https://github.com/docker/docker/pull/10414.patch"},"body":"This proposal describes how to use Google's [Macaroons](http://research.google.com/pubs/pub41892.html) as authorization layer for the remote api.\r\n\r\nI haven't written any code yet, I'd like to get feedback to know if people would be interested in adding something like this to the core.\r\n\r\nAs a naive explanation, Macaroons are secure layered cookies where you can add extra context. For instance, you can generate a macaroon to give only read access to the api. On top of that layer, you could add another caveat to give read access only to a specific container. I hope you get the idea, but I'll be happy to answer any further question.\r\n\r\nSigned-off-by: David Calavera <david.calavera@gmail.com>"},"comment":{"url":"https://api.github.com/repos/docker/docker/issues/comments/82002109","html_url":"https://github.com/docker/docker/pull/10414#issuecomment-82002109","issue_url":"https://api.github.com/repos/docker/docker/issues/10414","id":82002109,"user":{"login":"icecrime","id":1564054,"avatar_url":"https://avatars.githubusercontent.com/u/1564054?v=3","gravatar_id":"","url":"https://api.github.com/users/icecrime","html_url":"https://github.com/icecrime","followers_url":"https://api.github.com/users/icecrime/followers","following_url":"https://api.github.com/users/icecrime/following{/other_user}","gists_url":"https://api.github.com/users/icecrime/gists{/gist_id}","starred_url":"https://api.github.com/users/icecrime/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/icecrime/subscriptions","organizations_url":"https://api.github.com/users/icecrime/orgs","repos_url":"https://api.github.com/users/icecrime/repos","events_url":"https://api.github.com/users/icecrime/events{/privacy}","received_events_url":"https://api.github.com/users/icecrime/received_events","type":"User","site_admin":false},"created_at":"2015-03-17T00:16:15Z","updated_at":"2015-03-17T00:16:15Z","body":"Ping @diogomonica @NathanMcCauley!"}}