Remove authentication for accessing information publicly accesible
Metadata
Current evaluation
Anonymous charm-library fetching was enabled by canonical/charmcraft#1037 in commit 7476765b, using a fallback key when no system credential is available.
Resolution: closed resolved
Reason: Merged PR canonical/charmcraft#1037, commit 7476765b, enabled anonymous library fetching and resolved the reported authentication problem.
Evaluated by: mr-cal-bot
No scores available.
Issue body
### What needs to get done
Hi!,
There are several operations like list-lib and fetch-lib
that expose information that is already publicly available. Could
authentication be removed from these? Also, it would probably make
sense to do the same for querying revisions, resource-revisions and
status.
### Why it needs to get done
We are running several checks in our CI that currently require a
charmhub token to authenticate. This limits community contributions
given that forks would require their own token.
This will also improve dev experience
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Anonymous charm-library fetching was enabled by canonical/charmcraft#1037 in commit 7476765b, using a fallback key when no system credential is available. | |
| stealth/space-bunny-alpha | — | closed resolved | Anonymous library fetching landed in canonical/charmcraft#1037 (7476765b); #1124 was closed after the reporter confirmed fetch-lib already worked anonymously. | |
| stealth/space-bunny-alpha | — | closed resolved | Anonymous charm-library fetching was enabled in merged PR canonical/charmcraft#1037 (commit 7476765b), using a fallback key when no system credential is available. | |
| stealth/space-bunny-alpha | — | closed not a bug | The request for anonymous access to public library and revision information was closed after confirming that fetch-lib already allowed unauthenticated GETs. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Closed as already implemented. Anonymous access for public operations like fetch-lib already works. The author confirmed existing functionality meets the requirement, making additional changes unnecessary. | |
| qwen/qwen3.6-35b-a3b | — | — | Closed as works-as-designed. Public endpoints already support anonymous access, so no code changes were required. | |
| qwen/qwen3.6-35b-a3b | — | — | Closed as already implemented because anonymous access for fetch-lib already worked. The author confirmed the feature functioned correctly, making the request unnecessary. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Closed as already implemented. Maintainer confirmed fetch-lib already supports anonymous GET requests, resolving CI and development workflow concerns. No code changes required. |
Update history
No update history recorded yet.
Related work
-
Likely Fixed By:
canonical/charmcraft#1037
(confidence 98%)
Merged change that allowed charm-library fetching without a system credential.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #1037 charm libraries: allow anonymous fetching | charmcraft | merged | Merged charmcraft#1037 in commit 7476765b, enabling anonymous charm-library fetching with a fake key when the system keyring is unavailable. |