Something went wrong while fetching comments. Please try again.
Created by: mdaniel
Adds another top-level field to the src-config.json entitled "runAs" that serves as both the username as whom the request will run, and therefore also marks the access token as a sudo token. Currently, if "runAs" is provided but the token is not actually a sudo token, it will end pretty much as poorly as one might expect
I didn't add any additional sanity checking because the original code didn't have any, but I am cognizant that it appears the cli is currently using the deserialized string as is, surfacing header injection attacks if the config payload is untrusted.
fixes: #3
cc: @nicksnyder (less code than #22 but this one is an actual feature, and (heh) was requested, so that might help you more)