@abgov/nx-adsp 13.33.3 → 13.33.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +7 -6
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -76,7 +76,7 @@ cd my-solution
|
|
|
76
76
|
NXV=$(node -p "require('./node_modules/nx/package.json').version")
|
|
77
77
|
npm i -D @abgov/nx-oc @abgov/nx-adsp "@nx/express@$NXV" "@nx/vue@$NXV" "@nx/node@$NXV" "@nx/js@$NXV" "@nx/eslint@$NXV"
|
|
78
78
|
|
|
79
|
-
# 3. Sign in to ADSP once (
|
|
79
|
+
# 3. Sign in to ADSP once (OOB flow: prints an auth URL + prompts for the code; token is cached)
|
|
80
80
|
npx @abgov/adsp-cli login --env test --tenant "<Your Tenant>" --scope adsp-cli-admin
|
|
81
81
|
|
|
82
82
|
# 4. Scaffold a Postgres + Express + Vue + Node solution
|
|
@@ -389,8 +389,8 @@ npx nx g @abgov/nx-adsp:vue-intake-view my-app --name=application --resource=app
|
|
|
389
389
|
|
|
390
390
|
Most generators call ADSP APIs during generation, which needs an ADSP access
|
|
391
391
|
token. Sign-in is delegated to **[`@abgov/adsp-cli`](https://www.npmjs.com/package/@abgov/adsp-cli)** —
|
|
392
|
-
log in once
|
|
393
|
-
|
|
392
|
+
log in once and its cached token is reused across generator runs. There's no separate login built
|
|
393
|
+
into this plugin.
|
|
394
394
|
|
|
395
395
|
```bash
|
|
396
396
|
# Sign in once. --scope adsp-cli-admin grants the Keycloak-admin capability some
|
|
@@ -403,9 +403,10 @@ When you run a generator:
|
|
|
403
403
|
- if a valid cached token exists, generation proceeds with no prompt;
|
|
404
404
|
- if `ADSP_CLIENT_ID`/`ADSP_CLIENT_SECRET` are set (a CI service account — requires
|
|
405
405
|
`@abgov/adsp-cli` ^1.7.0+ and the tenant's `adsp-cli-ci` Keycloak client enabled with credentials
|
|
406
|
-
generated), a fresh token is acquired non-interactively via that account, no
|
|
407
|
-
|
|
408
|
-
|
|
406
|
+
generated), a fresh token is acquired non-interactively via that account, no login needed;
|
|
407
|
+
- otherwise, an **interactive** run launches `adsp login` for you (OOB flow: prints an authorization
|
|
408
|
+
URL, tries to open it, then prompts you to paste the code Keycloak shows — works in Dev Spaces and
|
|
409
|
+
containers; pass `--local` to use the local-server redirect flow instead); a **non-interactive**
|
|
409
410
|
run (`--no-interactive` / CI) fails with the exact `adsp login` command to run first, or the two
|
|
410
411
|
env vars above to set instead.
|
|
411
412
|
|