20750: Valid tokens can always GET the current token
authorBrett Smith <brett.smith@curii.com>
Fri, 11 Aug 2023 20:07:10 +0000 (16:07 -0400)
committerBrett Smith <brett.smith@curii.com>
Mon, 21 Aug 2023 19:59:30 +0000 (15:59 -0400)
commit5de32fb197f6b98d0722c2aacc0bfb8f63a6516f
treeba26514b8397446262583f99aeb317bb7b52025e
parent1eb8ce5b0258f71d936ca12f71986c94e183e268
20750: Valid tokens can always GET the current token

This is required for clusters in a federation to be able to validate
tokens issued by other clusters. Rather than requiring all users to
specify this manually (and fail cryptically when they don't), simply
grant the permission to all tokens.

Arvados-DCO-1.1-Signed-off-by: Brett Smith <brett.smith@curii.com>
doc/admin/scoped-tokens.html.textile.liquid
doc/admin/upgrading.html.textile.liquid
doc/api/tokens.html.textile.liquid
services/api/app/models/api_client_authorization.rb
services/api/test/functional/arvados/v1/api_client_authorizations_controller_test.rb