nft.storage icon indicating copy to clipboard operation
nft.storage copied to clipboard

Feature Request: Granular API Scopes and User Authorization for NFTStorage

Open mangoplane opened this issue 2 years ago • 1 comments

Hello NFTStorage team,

I would like to propose a feature request to introduce granular API scopes for NFTStorage. Currently, API keys do not have user-controlled scopes, which may raise security concerns for some users when sharing their keys. By introducing granular API scopes, users can share their keys with the confidence that it's safe and won't be misused to delete or modify files.

Moreover, I propose a feature allowing a user to authorize another user account to upload to their IPFS on their behalf. This would provide a more convenient way for users to collaborate and manage their NFT assets together.

These features would greatly enhance the security and usability of NFTStorage, making it even more attractive for individual creators, NFT tooling developers, and collectors.

I am interested in contributing to this feature by creating a PR if I find the time. Please let me know if you would consider this feature request and if there are any guidelines or recommendations for contributing to the project.

Thank you for your attention, and I look forward to your feedback.

mangoplane avatar Apr 08 '23 09:04 mangoplane

As a follow-up to my earlier feature request for NFT.Storage, I have discovered a relevant repository called UCAN.Storage, which is currently being developed by the NFT.Storage team. This project focuses on implementing User Controlled Authorization Networks (UCAN) for their service.

It appears that UCAN support is underway, and once fully implemented, it will address the features I proposed. UCAN.Storage will provide granular API scopes, user-controlled permissions, and the ability to authorize other user accounts to upload on behalf of another user. These enhancements will improve the security and usability of NFT.Storage, making it more appealing to individual creators, NFT tooling developers, and collectors.

To stay updated on the progress of UCAN.Storage implementation, I plan to follow the repository and consider contributing to the project. This way, I can help ensure that my feature request is addressed and NFT.Storage continues to evolve to meet the needs of its users.

mangoplane avatar Apr 08 '23 09:04 mangoplane

We’re closing this ticket for now, please re-open if it’s still an issue.

elizabeth-griffiths avatar Apr 26 '24 07:04 elizabeth-griffiths