Support passing an OAuth Bearer token in the client
letmaik opened this issue · comments
While the client mostly exists for testing against its own "emulator" SCITT service, the goal is also to allow using it against external compatible services. The SCITT spec doesn't talk about details of auth, just that it may exist, so as a starting point it would make sense to add support for simple Bearer tokens via an extra command line argument, say --token. How that token is created is outside the scope.
Bearer tokens and their transport are specified in https://www.rfc-editor.org/rfc/rfc6750. While the RFC defines three methods of sending the token, by far the most popular is via the Authorization HTTP header. I propose to implement just that.