Repository navigation
Account page: use MIP from your own computer - #51
Merged
Merged
Conversation
Shown when the notebook is enabled. Links to the Notebook page so Hub keeps the sign-in, opens Hub's /hub/token page in a new tab to create a personal API token, and offers a copyable MIP_URL/MIP_API_TOKEN setup snippet. The UI never requests, stores or shows the token itself. Co-Authored-By: Claude <noreply@anthropic.com>
This was referenced Oct 16, 2026
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| await fixture.whenStable(); | ||
|
|
||
| expect(writeText).toHaveBeenCalledWith( | ||
| `pip install mip-client\nexport MIP_URL=${window.location.origin}\nexport MIP_API_TOKEN=<paste your token here>`, |
Quote the MIP_API_TOKEN placeholder so pasting it unedited is not parsed as a redirection, say Python must run in the same terminal as the exports, give the copy button and the new-tab token link screen-reader labels, and test the clipboard failure message. Co-Authored-By: Claude <noreply@anthropic.com>
Opening the Notebook page starts a notebook server just to save the sign-in, and the Hub token page already signs the user in through Keycloak, so that step is gone. Add the PowerShell form of the exports, clear the copy status so a repeated copy is announced again, and style the token link as the primary action per DESIGN.md. Co-Authored-By: Claude <noreply@anthropic.com>
…ing the token The setup snippet put the API token in an environment variable, where it lands in the shell history and every program started from that terminal, AI assistants included, can read it. `mip login` asks for it without echoing and saves it to a file readable only by the user.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What and why
Adds a "Use MIP from your own computer" section to the account page, shown only when the notebook is enabled. It walks the user through:
<jupyter context>/hub/token) in a new tab, with the instruction to entercustom:mip-platform-tokenin Permissions and choose an expiry (JupyterHub limits it to 30 days by default);pip install mip-client,export MIP_URL=<this portal>,mip login.mip loginasks for the token without showing it and saves it to a file readable only by the user, so the token stays out of the shell history and out of the environment that every program, AI assistants included, can read. A note gives the PowerShell form ofMIP_URL.The portal never requests, stores or shows a token: the token is created on JupyterHub's page.
Part of the remote-access work; the token permission and client support are in the related mip-jupyter PR.
How it was tested
ng test --include src/app/pages/account-page/account-page.component.spec.ts): 5 pass.mip loginchange: the section renders, the token page is reachable through nginx (top-level/notebook/hub/tokenis proxied to the hub, not swallowed by the iframe redirects), and a token created there works from a laptop.Deployment notes
mip-clientrelease from the related mip-jupyter PR (it addsmip login).Related PRs