Using Tokens from an Azure Container Registry to Call the /_tags Endpoint

Question

I have generated an access token for my Azure Container Registry (ACR) using the Token Menu. I would like to use this access token to call the /_tags endpoint for a specific image in the registry, but I am not sure how to do this.

I can use the token to login using the docker login command in powershell, but the only way I've been able to get the api call to work is by using the admin account credentials.

I thought maybe the "Action" was a clue so I created a custom scope map for the Token that explicitly included "metadata_read" but that didn't help.

this question on stackoverflow

The error I get back:

    {
        "errors": [
            {
                "code": "UNAUTHORIZED",
                "message": "authentication required, visit https://aka.ms/acr/authorization for more information.",
                "detail": [
                    {
                        "Type": "repository",
                        "Name": "my-image",
                        "Action": "metadata_read"
                    }
                ]
            }
        ]
    }

Answer 1

Hello Justin Williams

Welcome to Microsoft Q&A Platform, thanks for posting your query here.

Apologies for delayed response on this. Based on the details shared, the ask from is on the ACR side. I assume that you may want to do this Create a token with repository-scoped permissions.

If this is not the case, then I would recommend to open a GitHub Issue on the page.

Hope this helps.