Investigation: streamline authentication support for multiple repos per namespace

[isc-tleavitt]

Might just be a matter of configuring a deploy key per (IPM package installed in dev mode with a .git folder)
Might be a matter of supporting 2FA to get around deploy keys entirely

[ppatriarcaISC]

Hey Tim,

Could this enhancement also leverage having each IRIS user to have its own configurable private SSH key defined in their profile? Instead of having one SSH private key that is shared and added to every developer's profile?

[isc-tleavitt]

@ppatriarcaISC the likely problem with that is that at the OS level the permissions will need to still be irisusr.

[isc-tleavitt]

(could still do that perhaps - I'm back from leave and catching up on all the activity in this area this morning.)

[isc-tleavitt]

#279 is going to be the solution here, so treating this as a duplicate.

[ppatriarcaISC]

@isc-tleavitt I'll let you make the call but potentially allowing for the SSH key to be defined at the user level instead of global setting (ex. one SSH key defined per configuration) might be a good enhancement. We don't have any immediate need for it so its no rush, but just wanted to mention as its different than the HTTPS thing. Or that could be moved to another topic/enhancement request.

[isc-tleavitt]

@ppatriarcaISC I think that's extra sketchy from a security perspective (for a shared development environment, which is really the only case where it matters) and don't want to support it.

[isc-tleavitt]

This intersects significantly with #279 and #280