Add spec for Trusted Publishers (OIDC auth for NuGet) (#13673)

* Add spec for Trusted Publishers (OIDC auth for NuGet) * Address comments Clarify branch, environment, and workflow filters. Add note about 2FA Fix typo. Clarify existing NuGet auth flows Require HTTPS for service index and ApiKeyService endpoint Mentioned public marketplace for GitHub Action * Update accepted/2024/trusted-publishers-oidc-for-nuget-push.md Co-authored-by: Damon Tivel <[email protected]> * Update accepted/2024/trusted-publishers-oidc-for-nuget-push.md Co-authored-by: Damon Tivel <[email protected]> * Address comments * Update accepted/2024/trusted-publishers-oidc-for-nuget-push.technical.md Co-authored-by: Damon Tivel <[email protected]> * Add example sub, clarify API key caching * Address comments Renamed resource from ApiKeyService to TokenService to be a bit more flexible for the future. * Add note about masking * Address some comments * Don't allow ID scoping and allowed action scoping * Update accepted/2024/trusted-publishers-oidc-for-nuget-push.md * Update accepted/2024/trusted-publishers-oidc-for-nuget-push.md Co-authored-by: Damon Tivel <[email protected]> * Update accepted/2024/trusted-publishers-oidc-for-nuget-push.technical.md Co-authored-by: Damon Tivel <[email protected]> * Add tag filtering to the proposal --------- Co-authored-by: Damon Tivel <[email protected]>
NuGet · Oct 8, 2024 · 3c9e768 · 3c9e768
1 parent d4913b2
commit 3c9e768
Show file tree

Hide file tree

Showing 5 changed files with 1,007 additions and 0 deletions.
diff --git a/accepted/2024/meta/trusted-publishers-oidc-for-nuget-push/scope-form.png b/accepted/2024/meta/trusted-publishers-oidc-for-nuget-push/scope-form.png
diff --git a/accepted/2024/meta/trusted-publishers-oidc-for-nuget-push/trust-policy-form.png b/accepted/2024/meta/trusted-publishers-oidc-for-nuget-push/trust-policy-form.png
diff --git a/...ed/2024/meta/trusted-publishers-oidc-for-nuget-push/trusted-publishers-flow.png b/...ed/2024/meta/trusted-publishers-oidc-for-nuget-push/trusted-publishers-flow.png