Press n or j to go to the next uncovered block, b, p or k for the previous block.
| 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 | 193x 193x 193x 193x 193x 193x 193x 193x 193x 193x 193x 193x 193x 193x 193x 193x 193x 193x 193x 193x 193x 193x 193x 193x 193x 193x 193x 193x 193x 193x 193x 193x 193x 193x 193x 193x 193x 12x 12x 10x 10x 1x 1x 1x 1x 1x 1x 9x 9x 9x 9x 9x 9x 1x 1x 8x 8x 8x 8x 8x 8x 7x 7x 8x 8x 8x 8x 8x 8x 8x 8x 8x 8x 8x 2x 2x 1x 1x 1x 1x 1x 8x 6x 6x 6x 1x 1x 12x 12x 5x 5x 5x 5x 5x 5x 5x 5x 5x 5x 5x 5x 5x 5x 5x 12x 193x 193x | import dedent from 'dedent';
import { z } from 'zod';
import { createApiToken } from '../../clever-client/auth-bridge.js';
import { config } from '../../config/config.js';
import { formatDate } from '../../lib/date-utils.js';
import { defineArgument } from '../../lib/define-argument.js';
import { defineCommand } from '../../lib/define-command.js';
import { defineOption } from '../../lib/define-option.js';
import { promptSecret } from '../../lib/prompts.js';
import { styleText } from '../../lib/style-text.js';
import { Logger } from '../../logger.js';
import { sendToAuthBridge } from '../../models/send-to-api.js';
import { getCurrent as getCurrentUser } from '../../models/user.js';
import { futureDateOrDuration } from '../../parsers.js';
import { humanJsonOutputFormatOption } from '../global.options.js';
export const tokensCreateCommand = defineCommand({
description: 'Create an API token',
since: '3.12.0',
options: {
expiration: defineOption({
name: 'expiration',
schema: z.string().default('1y').transform(futureDateOrDuration),
description: 'Duration until API token expiration (e.g.: 1h, 4d, 2w, 6M)',
aliases: ['e'],
placeholder: 'expiration',
}),
format: humanJsonOutputFormatOption,
},
args: [
defineArgument({
schema: z.string(),
description: 'API token name',
placeholder: 'api-token-name',
}),
],
async handler(options, apiTokenName) {
const { expiration, format } = options;
const user = await getCurrentUser();
if (!user.hasPassword) {
const apiTokenListHref = new URL('/users/me/api-tokens', config.CONSOLE_URL).href;
throw new Error(dedent`
${styleText('yellow', '!')} Your Clever Cloud account is linked via GitHub and has no password. Setting one is required to create API tokens.
${styleText('blue', '→')} To do so, go to the following URL: ${styleText('blue', apiTokenListHref)}
`);
}
// Max expiration is 1 year from now
const maxExpirationDate = new Date();
maxExpirationDate.setFullYear(maxExpirationDate.getFullYear() + 1);
if (expiration > maxExpirationDate) {
throw new Error('You cannot set an expiration date greater than 1 year');
}
const expirationDate = expiration;
const password = await promptSecret('Enter your password:');
let mfaCode;
if (user.preferredMFA === 'TOTP') {
mfaCode = await promptSecret('Enter your 2FA code:');
}
const tokenData = {
email: user.email,
password,
mfaCode,
name: apiTokenName,
expirationDate: expirationDate.toISOString(),
};
const createdToken = await createApiToken(tokenData)
.then(sendToAuthBridge)
.catch((error) => {
const errorCode = error?.responseBody?.code;
if (errorCode === 'invalid-credential') {
throw new Error('Invalid credentials, check your password');
}
if (errorCode === 'invalid-mfa-code') {
throw new Error('Invalid credentials, check your 2FA code');
}
throw error;
});
switch (format) {
case 'json':
Logger.printJson(createdToken);
break;
case 'human':
default:
Logger.println(dedent`
${styleText('green', '✔')} API token successfully created! Store it securely, you won't able to print it again.
- API token ID : ${styleText('grey', createdToken.apiTokenId)}
- API token : ${styleText('grey', createdToken.apiToken)}
- Expiration : ${styleText('grey', formatDate(createdToken.expirationDate))}
Export this token and use it to make authenticated requests to the Clever Cloud API through the Auth Bridge:
export CC_API_TOKEN=${createdToken.apiToken}
curl -H "Authorization: Bearer $CC_API_TOKEN" ${config.AUTH_BRIDGE_HOST}/v2/self
Then, to revoke this token, run:
clever tokens revoke ${createdToken.apiTokenId}
`);
}
},
});
|