This vignette covers how to obtain and use an OSF personal access token (PAT) for use with osfr.
PATs are required to upload files, create projects/components, access information about your private projects, or download files in your private projects. PATs are not required for accessing information about public projects or downloading public files, but authentication with a PAT will increase the rate limit on the API.
Unauthenticated requests are limited to 100 per hour; Authenticated requests are limited to 10,000 per day. So, if you are planning to make a large number of calls to the API, we suggest authenticating with a PAT even if one is not required for the functions you are running.
To create an OSF PAT, log into OSF through your browser, navigate to the OSF settings page, and click the create token button. You will need to create a PAT with at least osf.read_full scope; if you want to be able to edit information through the package, you will also need the PAT to have osf.write_full permissions. Once the PAT is created, save it in a safe space.
You can authenticate in two different ways:
Call the osf_auth() function in the console at the start of each new session and paste in your PAT.
Your PAT functions like a password, so it should not be hard coded into any scripts, ever.
To authenticate automatically, store the PAT as an environment variable named OSF_PAT, which osfr will detect upon being loaded. One way to do this is to create a .Renviron file in your home or project working directory that defines OSF_PAT.
If you’d like to learn more about .Renviron files, the R Startup chapter of What They Forgot to Teach You About R is highly recommended.
If your PAT has accidentally been publicly released in the world, you should deactivate that PAT. To do this, navigate to the OSF settings page and click on the :x: to the right of the PAT you want to deactivate. You can then create a new PAT and reauthenticate.