Provide a callback for the pkgme service

[Anthony Lenton]

Myapps should provide a callback for the pkgme service to contact once an app has been automatically packaged.

The URL should include a package id, and should receive POST data descibing:
 - its dependencies (as a comma-separated list),
 - distroarchseries it supports (also as a comma-separated list),
 - and a url to the packaged app.

These bits of information should be added to the Application model itself.

This callback should be authenticated, allowing only one blessed user that should be configurable.

[James Westby (james-w)]

> its dependencies (as a comma-separated list)

Why does myapps need this info separate to the rest?

> distroarchseries it supports (also as a comma-separated list),

I'm not sure we can give much useful information here, so for the time being pkgme
will just return the distroseries it supports, and maybe one or both of [i386, amd64]

It does raise the question of which distroseries should be targeted?

(Also, internally to pkgme that we need to take account of distroseries + arch in the shlibs information)

Thanks,

James

[Jonathan Lange (jml)]

Needs to receive any "guesses" that pkgme makes, which includes executable name as well as deps & distro.

[Danny Tamez (zematynnad)]

Would it make more sense to allow anyone with a certain privilege/permission to use the callback as opposed to "one blessed configurable user"? This way the change could be done via the admin?

[Danny Tamez (zematynnad)]

After some discussion on IRC it was agreed that it would be fine to restrict access to the callback API to anyone with the can review permission. This makes sense anyway as the pkgme user will need that permission to download the tarball in the first place.