[placeholder] Export a token or a cookie

[tcompa]

High-level: sooner or later, we may want to access data served through fractal-vizarr-viewer from a command-line application.
Fractal-web would be the right place to export the required piece of information required for authentication.

This is related to:

• View zarr from napari over HTTP (without/with authentication) fractal-vizarr-viewer#18
• Support reading remote zarrs via authenticated HTTP calls ngio#9

---

We should review what's the best approach among:

1. Expose a simple way to download the key/value pair of the fastapiusersauth cookie, from an authenticated fractal-web session. The current way is to open the browser developer tools and copy the cookie string, but we may want to simply expose it in the top-right user options.
2. Switch from cookie to tokens? Does it make sense? We would need to support them in fractal-vizarr-viewer. I've not thought carefully about this yet - TBD

[zonia3000]

2. Switch from cookie to tokens? Does it make sense? We would need to support them in fractal-vizarr-viewer.

While the cookie is automatically sent by the browser (based on the domain of the HTTP request), the token needs to be explicitly added by JavaScript when performing the request. This means that we would need to edit not only vizarr, but also zarrita.js, to add the token into the header.

[zonia3000]

After discussion with @tcompa: in fractal-vizarr-viewer backend we can support both the token and the cookie, so that vizarr can work with the cookies handled automatically by the browser and fractal-web can expose a "download token" button, which provides a token file that can be used from command line.

[tcompa]

Current plan:

• Support token as an authentication method fractal-vizarr-viewer#52
• Let the user export a token from fractal-web

[zonia3000]

Where should we put this? On the user menu on the right?

[tcompa]

Where should we put this? On the user menu on the right?

Maybe within "My profile"? No strong opinions..

[zonia3000]

[jluethi]

Coming to this delayed. Great that the token part is working out. We can have it on the "My profile" page for now. If we start to use it more regularly, I did like @zonia3000 initial suggestion of putting it into the user menu directly. But let's first see where this gets used :)