@affinidi/cli 2.0.0-beta.6 → 2.0.0-beta.8

package/README.md

@@ -45,7 +45,7 @@ Your login configuration will be created under your CLI's active project. Learn
 
 #### User Groups
 
-You may also want to create user groups for your application. They allow you to set access privileges for your users inside your application. Learn more about user groups [here](https://docs.affinidi.com/docs/affinidi-login/user-groups/).
+You may also want to create user groups for your application. They allow you to set access privileges for your users inside your application. A user's Affinidi Login ID token contains the groups the user belongs to, which can be used in your application to differentiate users and grant them access. Learn more about user groups [here](https://docs.affinidi.com/docs/affinidi-login/user-groups/).
 
 To create a user group use: [`affinidi login create-group`](#affinidi-login-create-group)
 
@@ -102,7 +102,9 @@ For convenience, the CLI adds the concept of Active Project. This is the project
 
 To programmatically call Affinidi APIs in your applications or in your automation you will require a Personal Access Token (PAT). Think of Personal Access Tokens as machine users that can perform operations on your behalf. PATs live outside of projects, meaning that they can be granted access to multiple projects.
 
-PATs use asymmetric keys where you are responsible of creating and maintaining the key pair. Please read about more about how PAT authentication works and how you can create the keys [here](#how-does-pat-authentication-work).
+PATs use asymmetric keys where you are responsible of creating and maintaining the key pair. 
+
+Please read about more about how PAT authentication works and how you can create the keys [here](https://docs.affinidi.com/dev-tools/affinidi-cli/manage-token/#how-does-pat-authentication-works).
 
 All PAT commands can be found under `affinidi token <command>`
 
@@ -118,7 +120,7 @@ All IAM commands can be found under `affinidi iam <command>`
 
 1. Add a user or a PAT to the project with [`affinidi iam add-principal`](#affinidi-iam-add-principal) - _Principals are either users or PATs (machine users)_
 
-2. Set the principal's access policies with [`affinidi iam update-policies`](#affinidi-iam-update-policies) - _Read more about policies [here](#how-do-policies-work)_
+2. Set the principal's access policies with [`affinidi iam update-policies`](#affinidi-iam-update-policies) - _Read more about policies [here](https://docs.affinidi.com/dev-tools/affinidi-cli/manage-iam/#defining-a-policy)_
 
 #### Journey summary
 
@@ -160,7 +162,7 @@ Once you have registered, authenticate in the CLI with:
 affinidi start
 ```
 
-### Command structure and ways to call commands
+### Understanding commands
 
 Commands in Affinidi CLI have the following structure:
 
@@ -173,40 +175,41 @@ affinidi <topic> <command> [flags]
 3. Commands corresponds to the actions to perform
 4. Flags are a way to provide the parameters required by the command
 
-You can input flags in different ways. All of the following will work:
+### Available commands
 
-```bash
-affinidi login create-config --file="config.json"
-affinidi login create-config --file "config.json"
-affinidi login create-config --file=config.json
-affinidi login create-config --file config.json
-affinidi login create-config -f "config.json"
-affinidi login create-config -f="config.json"
-affinidi login create-config -f"config.json"
-affinidi login create-config -f config.json
-affinidi login create-config -f=config.json
-affinidi login create-config -fconfig.json
-```
+In the [All Commands](#all-commands) section below you can find all of the CLI commands, with their help information, which includes usage, descriptions, flags and examples.
 
-### Finding commands
+#### Useful commands:
 
-In the [All Commands](#all-commands) section below you can find all of the CLI commands, with their help information, which includes usage, descriptions, flags and examples.
+[`affinidi start`](#affinidi-start) Log in to Affinidi
 
-There are some notable commands that don't belong to any topic and may be of use for you:
+[`affinidi stop`](#affinidi-stop) Log out of Affinidi
 
-[`affinidi commands`](#affinidi-commands) - List all available commands
+[`affinidi whoami`](#affinidi-whoami) - Show the current signed in user identifiers
+
+[`affinidi help`](#affinidi-help-commands) - Print the help information of a topic or command
 
 [`affinidi search`](#affinidi-search) - Search and navigate through available commands
 
+[`affinidi commands`](#affinidi-commands) - List all available commands
+
+[`affinidi generate app`](#affinidi-generate-app) Clones and configures a reference application
+
 [`affinidi autocomplete`](#affinidi-autocomplete-shell) - Print the instructions to set up command autocomplete
 
-[`affinidi help`](#affinidi-help-commands) - Print the help information of a topic or command
+`affinidi --version` - Show the current version of the Affinidi CLI installed on your machine
 
-[`affinidi start`](#affinidi-start) Log in to Affinidi
+### Help
 
-[`affinidi stop`](#affinidi-stop) Log out of Affinidi
+All commands and topics have a help document with usage, descriptions, flags and examples.
+
+View it with the help flag: `affinidi login create-config --help`
 
-### Global flags
+With the help root command: `affinidi help login create-config`
+
+Or by searching and selecting a command: `affinidi search`
+
+### Flags
 
 All commands have some global flags at their disposal.
 
@@ -216,6 +219,23 @@ All commands have some global flags at their disposal.
 
 `--no-color` Disables color in the output. Useful if you have trouble distinguishing colors.
 
+`--no-input` Disables all the interactive prompts. Useful for automation anc ci.
+
+You can input flags in multiple ways. All of the following will work:
+
+```bash
+affinidi login create-config --file="config.json"
+affinidi login create-config --file "config.json"
+affinidi login create-config --file=config.json
+affinidi login create-config --file config.json
+affinidi login create-config -f "config.json"
+affinidi login create-config -f="config.json"
+affinidi login create-config -f"config.json"
+affinidi login create-config -f config.json
+affinidi login create-config -f=config.json
+affinidi login create-config -fconfig.json
+```
+
 ### Active Project
 
 Affinidi CLI introduces a local concept of "Active Project" for convenience. Commands under the `login` and `iam` topics perform actions under a particular project. In order to not have to ask for the project and create the necessary credentials each time you call one of these commands, we ask you to define the CLI's working project once.
@@ -236,170 +256,6 @@ When you authenticate to Affinidi with `affinidi start` the CLI will create a fo
 
 When you run `affinidi stop` your session information is deleted.
 
-## How does PAT authentication work?
-
-In the following diagram you can find the flow of how you can set up a Personal Access Token and use it to call Affinidi APIs.
-
-```mermaid
-  flowchart TB
-    subgraph CLI
-      user_token["1.1. Authenticate to Affinidi"]
-      create_project["1.2. Create project"]
-      project_access["1.3. Get project credentials"]
-      create_token["3.1. Create PAT"]
-      add_token_project["3.2. Add PAT to project"]
-      set_policies["3.3. Set PAT policies"]
-
-      user_token --> create_project
-      create_project --> project_access
-      user_token --> create_token
-      create_token --> add_token_project
-      project_access --> add_token_project
-      add_token_project --> set_policies
-    end
-
-    subgraph Application
-      direction TB
-      sign_jwt["4.1. Sign JWT"]
-      delegate_token["4.2. Exchange for delegate token"]
-      call_project_api["4.3. Call Affinidi APIs"]
-
-      sign_jwt --> delegate_token
-      delegate_token --> call_project_api
-    end
-
-    create_keys["2. Create key pair"]
-    create_keys -. "public key PEM" .-> create_token
-    create_keys -. "private key PEM" .-> sign_jwt
-    set_policies -. "allows" .-> call_project_api
-```
-
-1. Authenticate with Affinidi and set up your project
-
-   1. Authenticate with Affinidi - [`affinidi start`](#affinidi-start)
-   2. Create project - [`affinidi project create-project`](#affinidi-project-create-project)
-   3. Get project credentials - [`affinidi project select-project`](#affinidi-project-select-project)
-
-2. Create and secure a key pair
-
-You can create a key pair using [openssl](https://www.openssl.org/docs/man1.1.1/man1/):
-
-```bash
-# Create an encrypted RSA private key with passphrase "hello"
-openssl genpkey -algorithm RSA -out privateKey.pem -aes-128-cbc -pass pass:hello
-
-# Extract the public key from the private key
-openssl rsa -in privateKey.pem -pubout -out publicKey.pem
-```
-
-Remember your passphrase as you will need it later to sign with your private key.
-
-Optionally you can rely on a cloud provider to securely manage your keys, such as [AWS KMS](https://aws.amazon.com/kms/), [GCP's Cloud KMS](https://cloud.google.com/security-key-management) or [Azure Key Vault](https://azure.microsoft.com/products/key-vault/)
-
-3. Create a PAT and grant it permissions
-
-   1. Create PAT - [`affinidi token create-token`](#affinidi-token-create-token)
-   2. Add PAT to project - [`affinidi iam add-principal`](#affinidi-iam-add-principal)
-   3. Set PAT policies - [`affinidi iam update-policies`](#affinidi-iam-update-policies)
-
-Remember the PAT Key ID as you will need it to sign with your private key. Read more about how to set policies [below](#how-do-policies-work).
-
-4. Use the private key to call Affinidi APIs from your application
-
-Learn more how to create a Delegate Tokens to call APIs in the next section.
-
-### Delegate tokens
-
-1. To create a delegate token you first need to sign a JWT with your private key. In the snippet below this is done with `signJWT(...)`. This should also be possible with third party key managers.
-
-2. Once you have a signed JWT you can use it to exchange it for a user scoped token. In the snippet this is done with `getUserToken(...)`. You can use this token to call some Affinidi APIs, however most APIs require a project scoped token.
-
-3. In the snippet we get a project scope token with `getProjectToken(...)`.
-
-```javascript
-import jwt from 'jsonwebtoken'
-import qs from 'qs'
-
-// Parameters required to sign JWT
-const PRIVATE_KEY = process.env.PRIVATE_KEY
-const ALGORITHM = process.env.ALGORITHM
-const PASSPHRASE = process.env.PASSPHRASE
-const KEY_ID = process.env.KEY_ID
-
-// Parameter required to sign JWT and get User Scoped Token
-const TOKEN_ID = process.env.TOKEN_ID
-
-// Parameter required to get Project Scoped Token
-const PROJECT_ID = process.env.PROJECT_ID
-
-function signJWT(privateKey, algorithm, passphrase, keyId, tokenId) {
-  const issueTimeSeconds = Math.floor(new Date().getTime() / 1000)
-  const payload = {
-    iss: tokenId,
-    sub: tokenId,
-    aud: 'https://euw1.elements.auth.affinidi.io/oauth2/token',
-    jti: new Date().toString() + Math.random(),
-    exp: issueTimeSeconds + 5 * 60,
-    iat: issueTimeSeconds,
-  }
-  const secret = { key: privateKey, passphrase }
-  const options = { algorithm: algorithm, keyid: keyId }
-  return jwt.sign(payload, secret, options)
-}
-
-async function getUserToken(tokenId, signedJWT) {
-  const formData = qs.stringify({
-    grant_type: 'client_credentials',
-    scope: 'openid',
-    client_assertion_type: 'urn:ietf:params:oauth:client-assertion-type:jwt-bearer',
-    client_assertion: signedJWT,
-    client_id: tokenId,
-  })
-  const response = await fetch('https://euw1.elements.auth.affinidi.io/oauth2/token', {
-    method: 'POST',
-    body: formData,
-    headers: {
-      'Content-Type': 'application/x-www-form-urlencoded',
-    },
-  })
-  if (response.status !== 200) throw new Error('Could not get user token')
-  return response.json()
-}
-
-async function getProjectToken(projectId, userScopeToken) {
-  const response = await fetch('https://apse1.api.affinidi.io/iam/v1/create-project-scoped-token', {
-    method: 'POST',
-    body: JSON.stringify({ projectId }),
-    headers: {
-      Authorization: `Bearer ${userScopeToken}`,
-      'Content-Type': 'application/json',
-    },
-  })
-  if (response.status !== 200) throw new Error('Could not get project token')
-  return response.json()
-}
-
-const signedJWT = signJWT(PRIVATE_KEY, ALGORITHM, PASSPHRASE, KEY_ID, TOKEN_ID)
-const userScopeToken = (await getUserToken(TOKEN_ID, signedJWT)).access_token
-const projectScopeToken = (await getProjectToken(PROJECT_ID, userScopeToken)).accessToken
-```
-
-4. With these tokens you can now call Affinidi APIs:
-
-```javascript
-const response = await fetch('https://apse1.api.affinidi.io/vpa/v1/login/configurations', {
-  headers: {
-    Authorization: `Bearer ${projectScopeToken}`,
-  },
-})
-const configurations = await response.json()
-console.log(configurations)
-```
-
-## How do policies work?
-
-WIP
-
 ## Support & Feedback
 
 If you face any issue or have some suggestion for us please don't hesitate to create a ticket [here](https://share.hsforms.com/1i-4HKZRXSsmENzXtPdIG4g8oa2v).
@@ -489,6 +345,7 @@ Please note that this FAQ is provided for informational purposes only and is not
 * [`affinidi token get-token`](#affinidi-token-get-token)
 * [`affinidi token list-tokens`](#affinidi-token-list-tokens)
 * [`affinidi token update-token`](#affinidi-token-update-token)
+* [`affinidi whoami`](#affinidi-whoami)
 
 ## `affinidi autocomplete [SHELL]`
 
@@ -555,26 +412,36 @@ _See code: [@oclif/plugin-commands](https://github.com/oclif/plugin-commands/blo
 
 ## `affinidi generate app`
 
-Generates a reference application and configures an Auth0 connection. Requires git
+Generates a NextJS reference application that integrates Affinidi Login. Requires git
 
 ```
 USAGE
-  $ affinidi generate app [--json] [--no-color] [-p <value>] [--force]
+  $ affinidi generate app [--json] [--no-color] [--no-input] [-s
+    affinidi-nextjs-nextauthjs|auth0-nextjs-nextauthjs] [-p <value>] [--force]
 
 FLAGS
-  -p, --path=<value>  Relative or absolute path where reference application should be cloned into
-  --force             Override destination directory if exists
+  -p, --path=<value>     Relative or absolute path where reference application should be cloned into
+  -s, --sample=<option>  Sample to generate
+                         <options: affinidi-nextjs-nextauthjs|auth0-nextjs-nextauthjs>
+  --force                Override destination directory if exists
 
 GLOBAL FLAGS
   --json      Format output as json.
   --no-color  Disables color in the output. If you have trouble distinguishing colors, consider using this flag.
+  --no-input  Disables all the interactive prompts
 
 EXAMPLES
   $ affinidi generate app
 
-  $ affinidi generate app -p <destination_path>
+  $ affinidi generate app -p "../my-app" -s affinidi-nextjs-nextauthjs
 
-  $ affinidi generate app --path <destination_path> --force
+  $ affinidi generate app --path "../my-app" --sample auth0-nextjs-nextauthjs --force
+
+FLAG DESCRIPTIONS
+  -s, --sample=affinidi-nextjs-nextauthjs|auth0-nextjs-nextauthjs  Sample to generate
+
+    Use affinidi-nextjs-nextauthjs to generate a Next.js+NextAuth.js app that integrates Affinidi Login directly
+    Use auth0-nextjs-nextauthjs to generate a Next.js+NextAuth.js app that integrates Affinidi Login through Auth0
 ```
 
 ## `affinidi help [COMMANDS]`
@@ -603,7 +470,7 @@ Adds a principal (user or token) to the active project
 
 ```
 USAGE
-  $ affinidi iam add-principal [--json] [--no-color] [-i <value>] [-t machine_user|user]
+  $ affinidi iam add-principal [--json] [--no-color] [--no-input] [-i <value>] [-t machine_user|user]
 
 FLAGS
   -i, --principal-id=<value>     ID of the principal
@@ -613,6 +480,7 @@ FLAGS
 GLOBAL FLAGS
   --json      Format output as json.
   --no-color  Disables color in the output. If you have trouble distinguishing colors, consider using this flag.
+  --no-input  Disables all the interactive prompts
 
 DESCRIPTION
   Adds a principal (user or token) to the active project
@@ -636,7 +504,7 @@ Gets the policies of a principal (user or token)
 
 ```
 USAGE
-  $ affinidi iam get-policies [--json] [--no-color] [-i <value>] [-t machine_user|user]
+  $ affinidi iam get-policies [--json] [--no-color] [--no-input] [-i <value>] [-t machine_user|user]
 
 FLAGS
   -i, --principal-id=<value>     ID of the principal
@@ -646,6 +514,7 @@ FLAGS
 GLOBAL FLAGS
   --json      Format output as json.
   --no-color  Disables color in the output. If you have trouble distinguishing colors, consider using this flag.
+  --no-input  Disables all the interactive prompts
 
 DESCRIPTION
   Gets the policies of a principal (user or token)
@@ -670,11 +539,12 @@ Lists the principals (users and tokens) in the active project
 
 ```
 USAGE
-  $ affinidi iam list-principals [--json] [--no-color]
+  $ affinidi iam list-principals [--json] [--no-color] [--no-input]
 
 GLOBAL FLAGS
   --json      Format output as json.
   --no-color  Disables color in the output. If you have trouble distinguishing colors, consider using this flag.
+  --no-input  Disables all the interactive prompts
 
 DESCRIPTION
   Lists the principals (users and tokens) in the active project
@@ -691,7 +561,7 @@ Removes a principal (user or token) from the active project
 
 ```
 USAGE
-  $ affinidi iam remove-principal [--json] [--no-color] [-i <value>] [-t machine_user|user]
+  $ affinidi iam remove-principal [--json] [--no-color] [--no-input] [-i <value>] [-t machine_user|user]
 
 FLAGS
   -i, --principal-id=<value>     ID of the principal
@@ -701,6 +571,7 @@ FLAGS
 GLOBAL FLAGS
   --json      Format output as json.
   --no-color  Disables color in the output. If you have trouble distinguishing colors, consider using this flag.
+  --no-input  Disables all the interactive prompts
 
 DESCRIPTION
   Removes a principal (user or token) from the active project
@@ -724,7 +595,7 @@ Updates the policies of a principal (user or token) in the active project
 
 ```
 USAGE
-  $ affinidi iam update-policies [--json] [--no-color] [-i <value>] [-t machine_user|user] [-f <value>]
+  $ affinidi iam update-policies [--json] [--no-color] [--no-input] [-i <value>] [-t machine_user|user] [-f <value>]
 
 FLAGS
   -f, --file=<value>             Location of a json file containing principal policies
@@ -735,6 +606,7 @@ FLAGS
 GLOBAL FLAGS
   --json      Format output as json.
   --no-color  Disables color in the output. If you have trouble distinguishing colors, consider using this flag.
+  --no-input  Disables all the interactive prompts
 
 DESCRIPTION
   Updates the policies of a principal (user or token) in the active project
@@ -759,7 +631,7 @@ Adds a user to a user group
 
 ```
 USAGE
-  $ affinidi login add-user-to-group [--json] [--no-color] [--group-name <value>] [--user-sub <value>]
+  $ affinidi login add-user-to-group [--json] [--no-color] [--no-input] [--group-name <value>] [--user-sub <value>]
 
 FLAGS
   --group-name=<value>  Name of the user group
@@ -768,6 +640,7 @@ FLAGS
 GLOBAL FLAGS
   --json      Format output as json.
   --no-color  Disables color in the output. If you have trouble distinguishing colors, consider using this flag.
+  --no-input  Disables all the interactive prompts
 
 EXAMPLES
   $ affinidi login add-user-to-group --group-name my_group --user-sub did:key:12345
@@ -779,7 +652,7 @@ Creates a login configuration in your active project
 
 ```
 USAGE
-  $ affinidi login create-config [--json] [--no-color] [-f <value> | -n <value> | -u <value> |
+  $ affinidi login create-config [--json] [--no-color] [--no-input] [-f <value> | -n <value> | -u <value> |
     --token-endpoint-auth-method client_secret_basic|client_secret_post|none | --claim-format array|map | --client-name
     <value> | --client-origin <value> | --client-logo <value>]
 
@@ -799,6 +672,7 @@ FLAGS
 GLOBAL FLAGS
   --json      Format output as json.
   --no-color  Disables color in the output. If you have trouble distinguishing colors, consider using this flag.
+  --no-input  Disables all the interactive prompts
 
 EXAMPLES
   $ affinidi login create-config
@@ -827,7 +701,7 @@ Create a user group in your active project
 
 ```
 USAGE
-  $ affinidi login create-group [--json] [--no-color] [-n <value>]
+  $ affinidi login create-group [--json] [--no-color] [--no-input] [-n <value>]
 
 FLAGS
   -n, --name=<value>  Name of the user group, that follows url-friendly pattern ^[a-z_]+$
@@ -835,6 +709,7 @@ FLAGS
 GLOBAL FLAGS
   --json      Format output as json.
   --no-color  Disables color in the output. If you have trouble distinguishing colors, consider using this flag.
+  --no-input  Disables all the interactive prompts
 
 EXAMPLES
   $ affinidi login create-group -n my_new_group
@@ -848,7 +723,7 @@ Deletes a login configuration from your active project
 
 ```
 USAGE
-  $ affinidi login delete-config [--json] [--no-color] [-i <value>]
+  $ affinidi login delete-config [--json] [--no-color] [--no-input] [-i <value>]
 
 FLAGS
   -i, --id=<value>  ID of the login configuration
@@ -856,6 +731,7 @@ FLAGS
 GLOBAL FLAGS
   --json      Format output as json.
   --no-color  Disables color in the output. If you have trouble distinguishing colors, consider using this flag.
+  --no-input  Disables all the interactive prompts
 
 EXAMPLES
   $ affinidi login delete-config -i <value>
@@ -869,7 +745,7 @@ Deletes a user group from your active project
 
 ```
 USAGE
-  $ affinidi login delete-group [--json] [--no-color] [-n <value>]
+  $ affinidi login delete-group [--json] [--no-color] [--no-input] [-n <value>]
 
 FLAGS
   -n, --name=<value>  Name of the user group
@@ -877,6 +753,7 @@ FLAGS
 GLOBAL FLAGS
   --json      Format output as json.
   --no-color  Disables color in the output. If you have trouble distinguishing colors, consider using this flag.
+  --no-input  Disables all the interactive prompts
 
 EXAMPLES
   $ affinidi login delete-group -n my_group
@@ -890,7 +767,7 @@ Gets the details of a login configuration in your active project
 
 ```
 USAGE
-  $ affinidi login get-config [--json] [--no-color] [-i <value>]
+  $ affinidi login get-config [--json] [--no-color] [--no-input] [-i <value>]
 
 FLAGS
   -i, --id=<value>  ID of the login configuration
@@ -898,6 +775,7 @@ FLAGS
 GLOBAL FLAGS
   --json      Format output as json.
   --no-color  Disables color in the output. If you have trouble distinguishing colors, consider using this flag.
+  --no-input  Disables all the interactive prompts
 
 EXAMPLES
   $ affinidi login get-config -i <value>
@@ -911,7 +789,7 @@ Gets the details of a user group
 
 ```
 USAGE
-  $ affinidi login get-group [--json] [--no-color] [-n <value>]
+  $ affinidi login get-group [--json] [--no-color] [--no-input] [-n <value>]
 
 FLAGS
   -n, --name=<value>  Name of the user group
@@ -919,6 +797,7 @@ FLAGS
 GLOBAL FLAGS
   --json      Format output as json.
   --no-color  Disables color in the output. If you have trouble distinguishing colors, consider using this flag.
+  --no-input  Disables all the interactive prompts
 
 EXAMPLES
   $ affinidi login get-group -n my_group
@@ -932,11 +811,12 @@ Lists login configurations in your active project
 
 ```
 USAGE
-  $ affinidi login list-configs [--json] [--no-color]
+  $ affinidi login list-configs [--json] [--no-color] [--no-input]
 
 GLOBAL FLAGS
   --json      Format output as json.
   --no-color  Disables color in the output. If you have trouble distinguishing colors, consider using this flag.
+  --no-input  Disables all the interactive prompts
 
 EXAMPLES
   $ affinidi login list-configs
@@ -948,11 +828,12 @@ Lists user groups in your active project
 
 ```
 USAGE
-  $ affinidi login list-groups [--json] [--no-color]
+  $ affinidi login list-groups [--json] [--no-color] [--no-input]
 
 GLOBAL FLAGS
   --json      Format output as json.
   --no-color  Disables color in the output. If you have trouble distinguishing colors, consider using this flag.
+  --no-input  Disables all the interactive prompts
 
 EXAMPLES
   $ affinidi login list-groups
@@ -964,7 +845,7 @@ Use this command to list users in the user group
 
 ```
 USAGE
-  $ affinidi login list-users-in-group [--json] [--no-color] [--group-name <value>]
+  $ affinidi login list-users-in-group [--json] [--no-color] [--no-input] [--group-name <value>]
 
 FLAGS
   --group-name=<value>  Name of the user group
@@ -972,6 +853,7 @@ FLAGS
 GLOBAL FLAGS
   --json      Format output as json.
   --no-color  Disables color in the output. If you have trouble distinguishing colors, consider using this flag.
+  --no-input  Disables all the interactive prompts
 
 EXAMPLES
   $ affinidi login list-users-in-group --group-name my_group
@@ -983,7 +865,8 @@ Removes a user from a user group
 
 ```
 USAGE
-  $ affinidi login remove-user-from-group [--json] [--no-color] [--group-name <value>] [--user-mapping-id <value>]
+  $ affinidi login remove-user-from-group [--json] [--no-color] [--no-input] [--group-name <value>] [--user-mapping-id
+  <value>]
 
 FLAGS
   --group-name=<value>       Name of the user group
@@ -992,6 +875,7 @@ FLAGS
 GLOBAL FLAGS
   --json      Format output as json.
   --no-color  Disables color in the output. If you have trouble distinguishing colors, consider using this flag.
+  --no-input  Disables all the interactive prompts
 
 EXAMPLES
   $ affinidi login remove-user-from-group --group-name my_group --user-mapping-id <value>
@@ -1003,7 +887,7 @@ Updates a login configuration
 
 ```
 USAGE
-  $ affinidi login update-config [--json] [--no-color] [-i <value>] [-f <value> | -n <value> | -u <value> |
+  $ affinidi login update-config [--json] [--no-color] [--no-input] [-i <value>] [-f <value> | -n <value> | -u <value> |
     --token-endpoint-auth-method client_secret_basic|client_secret_post|none | --client-name <value> | --client-origin
     <value> | --client-logo <value>]
 
@@ -1022,6 +906,7 @@ FLAGS
 GLOBAL FLAGS
   --json      Format output as json.
   --no-color  Disables color in the output. If you have trouble distinguishing colors, consider using this flag.
+  --no-input  Disables all the interactive prompts
 
 EXAMPLES
   $ affinidi login update-config --id <value> -f loginConfig.json
@@ -1048,14 +933,16 @@ Creates a project
 
 ```
 USAGE
-  $ affinidi project create-project [--json] [--no-color] [-n <value>]
+  $ affinidi project create-project [--json] [--no-color] [--no-input] [-n <value>] [-d <value>]
 
 FLAGS
-  -n, --name=<value>  Name of the project
+  -d, --description=<value>  Description of the project
+  -n, --name=<value>         Name of the project
 
 GLOBAL FLAGS
   --json      Format output as json.
   --no-color  Disables color in the output. If you have trouble distinguishing colors, consider using this flag.
+  --no-input  Disables all the interactive prompts
 
 EXAMPLES
   $ affinidi project create-project -n MyProjectName
@@ -1069,11 +956,12 @@ Gets the current active project
 
 ```
 USAGE
-  $ affinidi project get-active-project [--json] [--no-color]
+  $ affinidi project get-active-project [--json] [--no-color] [--no-input]
 
 GLOBAL FLAGS
   --json      Format output as json.
   --no-color  Disables color in the output. If you have trouble distinguishing colors, consider using this flag.
+  --no-input  Disables all the interactive prompts
 
 EXAMPLES
   $ affinidi project get-active-project
@@ -1085,11 +973,12 @@ Lists your projects
 
 ```
 USAGE
-  $ affinidi project list-projects [--json] [--no-color]
+  $ affinidi project list-projects [--json] [--no-color] [--no-input]
 
 GLOBAL FLAGS
   --json      Format output as json.
   --no-color  Disables color in the output. If you have trouble distinguishing colors, consider using this flag.
+  --no-input  Disables all the interactive prompts
 
 EXAMPLES
   $ affinidi project list-projects
@@ -1101,7 +990,7 @@ Sets a project as the active project
 
 ```
 USAGE
-  $ affinidi project select-project [--json] [--no-color] [-i <value>]
+  $ affinidi project select-project [--json] [--no-color] [--no-input] [-i <value>]
 
 FLAGS
   -i, --project-id=<value>  ID of the project
@@ -1109,6 +998,7 @@ FLAGS
 GLOBAL FLAGS
   --json      Format output as json.
   --no-color  Disables color in the output. If you have trouble distinguishing colors, consider using this flag.
+  --no-input  Disables all the interactive prompts
 
 EXAMPLES
   $ affinidi project select-project
@@ -1140,7 +1030,7 @@ Log in to Affinidi
 
 ```
 USAGE
-  $ affinidi start [--json] [--no-color] [-i <value>]
+  $ affinidi start [--json] [--no-color] [--no-input] [-i <value>]
 
 FLAGS
   -i, --project-id=<value>  ID of the project to set as active
@@ -1148,6 +1038,7 @@ FLAGS
 GLOBAL FLAGS
   --json      Format output as json.
   --no-color  Disables color in the output. If you have trouble distinguishing colors, consider using this flag.
+  --no-input  Disables all the interactive prompts
 
 EXAMPLES
   $ affinidi start
@@ -1157,7 +1048,7 @@ EXAMPLES
   $ affinidi start --project-id <project-id>
 ```
 
-_See code: [dist/commands/start.ts](https://github.com/affinidi/affinidi-cli/blob/v2.0.0-beta.5/dist/commands/start.ts)_
+_See code: [dist/commands/start.ts](https://github.com/affinidi/affinidi-cli/blob/v2.0.0-beta.6/dist/commands/start.ts)_
 
 ## `affinidi stop`
 
@@ -1165,17 +1056,18 @@ Log out from Affinidi
 
 ```
 USAGE
-  $ affinidi stop [--json] [--no-color]
+  $ affinidi stop [--json] [--no-color] [--no-input]
 
 GLOBAL FLAGS
   --json      Format output as json.
   --no-color  Disables color in the output. If you have trouble distinguishing colors, consider using this flag.
+  --no-input  Disables all the interactive prompts
 
 EXAMPLES
   $ affinidi stop
 ```
 
-_See code: [dist/commands/stop.ts](https://github.com/affinidi/affinidi-cli/blob/v2.0.0-beta.5/dist/commands/stop.ts)_
+_See code: [dist/commands/stop.ts](https://github.com/affinidi/affinidi-cli/blob/v2.0.0-beta.6/dist/commands/stop.ts)_
 
 ## `affinidi token create-token`
 
@@ -1183,7 +1075,7 @@ Creates a Personal Access Token (PAT)
 
 ```
 USAGE
-  $ affinidi token create-token [--json] [--no-color] [-n <value>] [-k <value>] [-f <value>] [--algorithm
+  $ affinidi token create-token [--json] [--no-color] [--no-input] [-n <value>] [-k <value>] [-f <value>] [--algorithm
     RS256|RS512|ES256|ES512]
 
 FLAGS
@@ -1196,6 +1088,7 @@ FLAGS
 GLOBAL FLAGS
   --json      Format output as json.
   --no-color  Disables color in the output. If you have trouble distinguishing colors, consider using this flag.
+  --no-input  Disables all the interactive prompts
 
 EXAMPLES
   $ affinidi token create-token -n MyNewToken -k MyKeyID -f publicKey.pem
@@ -1209,7 +1102,7 @@ Deletes a Personal Access Token (PAT)
 
 ```
 USAGE
-  $ affinidi token delete-token [--json] [--no-color] [-i <value>]
+  $ affinidi token delete-token [--json] [--no-color] [--no-input] [-i <value>]
 
 FLAGS
   -i, --token-id=<value>  ID of the Personal Access Token
@@ -1217,6 +1110,7 @@ FLAGS
 GLOBAL FLAGS
   --json      Format output as json.
   --no-color  Disables color in the output. If you have trouble distinguishing colors, consider using this flag.
+  --no-input  Disables all the interactive prompts
 
 EXAMPLES
   $ affinidi token delete-token -i <uuid>
@@ -1230,7 +1124,7 @@ Gets the details of a Personal Access Token (PAT)
 
 ```
 USAGE
-  $ affinidi token get-token [--json] [--no-color] [-i <value>]
+  $ affinidi token get-token [--json] [--no-color] [--no-input] [-i <value>]
 
 FLAGS
   -i, --token-id=<value>  ID of the Personal Access Token
@@ -1238,6 +1132,7 @@ FLAGS
 GLOBAL FLAGS
   --json      Format output as json.
   --no-color  Disables color in the output. If you have trouble distinguishing colors, consider using this flag.
+  --no-input  Disables all the interactive prompts
 
 EXAMPLES
   $ affinidi token get-token -i <uuid>
@@ -1251,11 +1146,12 @@ Lists your Personal Access Tokens (PATs)
 
 ```
 USAGE
-  $ affinidi token list-tokens [--json] [--no-color]
+  $ affinidi token list-tokens [--json] [--no-color] [--no-input]
 
 GLOBAL FLAGS
   --json      Format output as json.
   --no-color  Disables color in the output. If you have trouble distinguishing colors, consider using this flag.
+  --no-input  Disables all the interactive prompts
 
 EXAMPLES
   $ affinidi token list-tokens
@@ -1267,8 +1163,8 @@ Updates a Personal Access Token (PAT)
 
 ```
 USAGE
-  $ affinidi token update-token [--json] [--no-color] [-i <value>] [-n <value>] [-k <value>] [-f <value>] [--algorithm
-    RS256|RS512|ES256|ES512]
+  $ affinidi token update-token [--json] [--no-color] [--no-input] [-i <value>] [-n <value>] [-k <value>] [-f <value>]
+    [--algorithm RS256|RS512|ES256|ES512]
 
 FLAGS
   -f, --public-key-file=<value>  Location of the public key PEM file
@@ -1281,10 +1177,30 @@ FLAGS
 GLOBAL FLAGS
   --json      Format output as json.
   --no-color  Disables color in the output. If you have trouble distinguishing colors, consider using this flag.
+  --no-input  Disables all the interactive prompts
 
 EXAMPLES
   $ affinidi token update-token -i <uuid> -n MyNewToken -k MyKeyID -f publicKey.pem
 
   $ affinidi token update-token --token-id <uuid> --name "My new token" --key-id "My key ID" --public-key-file publicKey.pem --algorithm RS256
 ```
+
+## `affinidi whoami`
+
+Returns user's subject and principalId from his active session
+
+```
+USAGE
+  $ affinidi whoami [--json] [--no-color] [--no-input]
+
+GLOBAL FLAGS
+  --json      Format output as json.
+  --no-color  Disables color in the output. If you have trouble distinguishing colors, consider using this flag.
+  --no-input  Disables all the interactive prompts
+
+EXAMPLES
+  $ affinidi whoami
+```
+
+_See code: [dist/commands/whoami.ts](https://github.com/affinidi/affinidi-cli/blob/v2.0.0-beta.6/dist/commands/whoami.ts)_
 <!-- commandsstop -->