Support for plugin repository tokens

[m-kuhn]

plugins.qgis.org now supports tokens, see qgis/QGIS-Django#326
It would be great to have support for this in here to use scoped tokens rather than personal access credentials for uploading plugins

[Guts]

Sure!

Same for embedding the license file.

[Guts]

Hi @Xpirix,

Can you share us some documentation (md, OpenAPI JSON/YAML...) where we can find details about the POST request required to work those API token please?

[Xpirix]

Hi @Guts

Please find some POST request templates at https://github.com/qgis/QGIS-Django/blob/master/readme.md#token-based-authentication. Please let me know if you need more specific details.

[Guts]

Thanks @Xpirix!

I was thinking about something like swagger but I think we can move on for now with this example.

Is there a development or test instance of plugins.qgis.org on which to base our unit tests in CI/CD to check if publishing works as expected?

[Xpirix]

Yes, swagger is a good idea. I will try to implement it along with the incoming resources hub API.

Please find the unit test for this feature at: https://github.com/qgis/QGIS-Django/blob/master/qgis-app/plugins/tests/test_token_auth.py

[Guts]

Yes, swagger is a good idea. I will try to implement it along with the incoming resources hub API.

It would be really appreciated! Do you want to me creating an issue?

[Xpirix]

Yes please, thank you.

[Guts]

Yes please, thank you.

Done in qgis/QGIS-Django#473