@commercetools-frontend/mc-scripts 23.2.1 → 23.2.3

package/dist/{graphql-requests-02024fb9.cjs.dev.js → graphql-requests-28c9c031.cjs.prod.js}

@@ -14,7 +14,7 @@ var chalk = require('chalk');
 var graphql = require('graphql');
 var graphqlRequest = require('graphql-request');
 var constants = require('@commercetools-frontend/constants');
-var credentialsStorage$1 = require('./credentials-storage-8246aab4.cjs.dev.js');
+var credentialsStorage$1 = require('./credentials-storage-52529612.cjs.prod.js');
 
 function _interopDefault (e) { return e && e.__esModule ? e : { 'default': e }; }
 
@@ -43,15 +43,19 @@ var UpdateCustomViewFromCli = { kind: "Document", definitions: [{ kind: "Operati
 const credentialsStorage = new credentialsStorage$1.CredentialsStorage();
 async function requestWithTokenRetry(document, requestOptions) {
   let retryCount = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : 0;
+  const shouldUseExperimentalIdentityAuthFlow = process.env.ENABLE_EXPERIMENTAL_IDENTITY_AUTH_FLOW === 'true';
   const token = credentialsStorage.getToken(requestOptions.mcApiUrl);
+  const tokenHeader = shouldUseExperimentalIdentityAuthFlow ? {
+    [constants.SUPPORTED_HEADERS.AUTHORIZATION]: `Bearer ${token}`
+  } : {
+    'x-mc-cli-access-token': token
+  };
   const client = new graphqlRequest.GraphQLClient(`${requestOptions.mcApiUrl}/graphql`, {
     headers: _objectSpread(_objectSpread({
       Accept: 'application/json',
       'Content-Type': 'application/json',
       'x-user-agent': credentialsStorage$1.userAgent
-    }, token ? {
-      'x-mc-cli-access-token': token
-    } : {}), requestOptions.headers)
+    }, token ? tokenHeader : {}), requestOptions.headers)
   });
   try {
     const result = await client.rawRequest(graphql.print(document), requestOptions.variables);

package/dist/{graphql-requests-9b0cf79b.esm.js → graphql-requests-5b3a9ffc.esm.js}

@@ -11,8 +11,8 @@ import _someInstanceProperty from '@babel/runtime-corejs3/core-js-stable/instanc
 import chalk from 'chalk';
 import { print } from 'graphql';
 import { GraphQLClient, ClientError } from 'graphql-request';
-import { GRAPHQL_TARGETS } from '@commercetools-frontend/constants';
-import { C as CredentialsStorage, u as userAgent } from './credentials-storage-caf1c2ad.esm.js';
+import { GRAPHQL_TARGETS, SUPPORTED_HEADERS } from '@commercetools-frontend/constants';
+import { C as CredentialsStorage, u as userAgent } from './credentials-storage-e094db15.esm.js';
 
 function ownKeys(e, r) { var t = _Object$keys(e); if (_Object$getOwnPropertySymbols) { var o = _Object$getOwnPropertySymbols(e); r && (o = _filterInstanceProperty(o).call(o, function (r) { return _Object$getOwnPropertyDescriptor(e, r).enumerable; })), t.push.apply(t, o); } return t; }
 function _objectSpread(e) { for (var r = 1; r < arguments.length; r++) { var _context2, _context3; var t = null != arguments[r] ? arguments[r] : {}; r % 2 ? _forEachInstanceProperty(_context2 = ownKeys(Object(t), !0)).call(_context2, function (r) { _defineProperty(e, r, t[r]); }) : _Object$getOwnPropertyDescriptors ? _Object$defineProperties(e, _Object$getOwnPropertyDescriptors(t)) : _forEachInstanceProperty(_context3 = ownKeys(Object(t))).call(_context3, function (r) { _Object$defineProperty(e, r, _Object$getOwnPropertyDescriptor(t, r)); }); } return e; }
@@ -28,15 +28,19 @@ var UpdateCustomViewFromCli = { kind: "Document", definitions: [{ kind: "Operati
 const credentialsStorage = new CredentialsStorage();
 async function requestWithTokenRetry(document, requestOptions) {
   let retryCount = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : 0;
+  const shouldUseExperimentalIdentityAuthFlow = process.env.ENABLE_EXPERIMENTAL_IDENTITY_AUTH_FLOW === 'true';
   const token = credentialsStorage.getToken(requestOptions.mcApiUrl);
+  const tokenHeader = shouldUseExperimentalIdentityAuthFlow ? {
+    [SUPPORTED_HEADERS.AUTHORIZATION]: `Bearer ${token}`
+  } : {
+    'x-mc-cli-access-token': token
+  };
   const client = new GraphQLClient(`${requestOptions.mcApiUrl}/graphql`, {
     headers: _objectSpread(_objectSpread({
       Accept: 'application/json',
       'Content-Type': 'application/json',
       'x-user-agent': userAgent
-    }, token ? {
-      'x-mc-cli-access-token': token
-    } : {}), requestOptions.headers)
+    }, token ? tokenHeader : {}), requestOptions.headers)
   });
   try {
     const result = await client.rawRequest(print(document), requestOptions.variables);

package/dist/{graphql-requests-a42d578d.cjs.prod.js → graphql-requests-8b3897b7.cjs.dev.js}

@@ -14,7 +14,7 @@ var chalk = require('chalk');
 var graphql = require('graphql');
 var graphqlRequest = require('graphql-request');
 var constants = require('@commercetools-frontend/constants');
-var credentialsStorage$1 = require('./credentials-storage-8cf72194.cjs.prod.js');
+var credentialsStorage$1 = require('./credentials-storage-6d91b6da.cjs.dev.js');
 
 function _interopDefault (e) { return e && e.__esModule ? e : { 'default': e }; }
 
@@ -43,15 +43,19 @@ var UpdateCustomViewFromCli = { kind: "Document", definitions: [{ kind: "Operati
 const credentialsStorage = new credentialsStorage$1.CredentialsStorage();
 async function requestWithTokenRetry(document, requestOptions) {
   let retryCount = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : 0;
+  const shouldUseExperimentalIdentityAuthFlow = process.env.ENABLE_EXPERIMENTAL_IDENTITY_AUTH_FLOW === 'true';
   const token = credentialsStorage.getToken(requestOptions.mcApiUrl);
+  const tokenHeader = shouldUseExperimentalIdentityAuthFlow ? {
+    [constants.SUPPORTED_HEADERS.AUTHORIZATION]: `Bearer ${token}`
+  } : {
+    'x-mc-cli-access-token': token
+  };
   const client = new graphqlRequest.GraphQLClient(`${requestOptions.mcApiUrl}/graphql`, {
     headers: _objectSpread(_objectSpread({
       Accept: 'application/json',
       'Content-Type': 'application/json',
       'x-user-agent': credentialsStorage$1.userAgent
-    }, token ? {
-      'x-mc-cli-access-token': token
-    } : {}), requestOptions.headers)
+    }, token ? tokenHeader : {}), requestOptions.headers)
   });
   try {
     const result = await client.rawRequest(graphql.print(document), requestOptions.variables);

package/dist/login-05350511.cjs.prod.js

@@ -0,0 +1,217 @@
+'use strict';
+
+var _Promise = require('@babel/runtime-corejs3/core-js-stable/promise');
+var _URL = require('@babel/runtime-corejs3/core-js-stable/url');
+var crypto = require('node:crypto');
+var process = require('node:process');
+var chalk = require('chalk');
+var prompts = require('prompts');
+var applicationConfig = require('@commercetools-frontend/application-config');
+var _package = require('./package-325393f8.cjs.prod.js');
+var _Object$keys = require('@babel/runtime-corejs3/core-js-stable/object/keys');
+var _Object$getOwnPropertySymbols = require('@babel/runtime-corejs3/core-js-stable/object/get-own-property-symbols');
+var _filterInstanceProperty = require('@babel/runtime-corejs3/core-js-stable/instance/filter');
+var _Object$getOwnPropertyDescriptor = require('@babel/runtime-corejs3/core-js-stable/object/get-own-property-descriptor');
+var _forEachInstanceProperty = require('@babel/runtime-corejs3/core-js-stable/instance/for-each');
+var _Object$getOwnPropertyDescriptors = require('@babel/runtime-corejs3/core-js-stable/object/get-own-property-descriptors');
+var _Object$defineProperties = require('@babel/runtime-corejs3/core-js-stable/object/define-properties');
+var _Object$defineProperty = require('@babel/runtime-corejs3/core-js-stable/object/define-property');
+var _defineProperty = require('@babel/runtime-corejs3/helpers/defineProperty');
+var _JSON$stringify = require('@babel/runtime-corejs3/core-js-stable/json/stringify');
+var fetch = require('node-fetch');
+var credentialsStorage$1 = require('./credentials-storage-52529612.cjs.prod.js');
+var http = require('node:http');
+var jwtDecode = require('jwt-decode');
+require('@commercetools/http-user-agent');
+require('@babel/runtime-corejs3/helpers/classCallCheck');
+require('@babel/runtime-corejs3/helpers/createClass');
+require('@babel/runtime-corejs3/core-js-stable/date/now');
+require('node:fs');
+require('node:os');
+require('node:path');
+require('./does-file-exist-be53305d.cjs.prod.js');
+
+function _interopDefault (e) { return e && e.__esModule ? e : { 'default': e }; }
+
+function _interopNamespace(e) {
+  if (e && e.__esModule) return e;
+  var n = Object.create(null);
+  if (e) {
+    Object.keys(e).forEach(function (k) {
+      if (k !== 'default') {
+        var d = Object.getOwnPropertyDescriptor(e, k);
+        Object.defineProperty(n, k, d.get ? d : {
+          enumerable: true,
+          get: function () { return e[k]; }
+        });
+      }
+    });
+  }
+  n["default"] = e;
+  return Object.freeze(n);
+}
+
+var _Promise__default = /*#__PURE__*/_interopDefault(_Promise);
+var _URL__default = /*#__PURE__*/_interopDefault(_URL);
+var crypto__default = /*#__PURE__*/_interopDefault(crypto);
+var process__default = /*#__PURE__*/_interopDefault(process);
+var chalk__default = /*#__PURE__*/_interopDefault(chalk);
+var prompts__default = /*#__PURE__*/_interopDefault(prompts);
+var _Object$keys__default = /*#__PURE__*/_interopDefault(_Object$keys);
+var _Object$getOwnPropertySymbols__default = /*#__PURE__*/_interopDefault(_Object$getOwnPropertySymbols);
+var _filterInstanceProperty__default = /*#__PURE__*/_interopDefault(_filterInstanceProperty);
+var _Object$getOwnPropertyDescriptor__default = /*#__PURE__*/_interopDefault(_Object$getOwnPropertyDescriptor);
+var _forEachInstanceProperty__default = /*#__PURE__*/_interopDefault(_forEachInstanceProperty);
+var _Object$getOwnPropertyDescriptors__default = /*#__PURE__*/_interopDefault(_Object$getOwnPropertyDescriptors);
+var _Object$defineProperties__default = /*#__PURE__*/_interopDefault(_Object$defineProperties);
+var _Object$defineProperty__default = /*#__PURE__*/_interopDefault(_Object$defineProperty);
+var _JSON$stringify__default = /*#__PURE__*/_interopDefault(_JSON$stringify);
+var fetch__default = /*#__PURE__*/_interopDefault(fetch);
+var http__default = /*#__PURE__*/_interopDefault(http);
+var jwtDecode__default = /*#__PURE__*/_interopDefault(jwtDecode);
+
+function ownKeys(e, r) { var t = _Object$keys__default["default"](e); if (_Object$getOwnPropertySymbols__default["default"]) { var o = _Object$getOwnPropertySymbols__default["default"](e); r && (o = _filterInstanceProperty__default["default"](o).call(o, function (r) { return _Object$getOwnPropertyDescriptor__default["default"](e, r).enumerable; })), t.push.apply(t, o); } return t; }
+function _objectSpread(e) { for (var r = 1; r < arguments.length; r++) { var _context, _context2; var t = null != arguments[r] ? arguments[r] : {}; r % 2 ? _forEachInstanceProperty__default["default"](_context = ownKeys(Object(t), !0)).call(_context, function (r) { _defineProperty(e, r, t[r]); }) : _Object$getOwnPropertyDescriptors__default["default"] ? _Object$defineProperties__default["default"](e, _Object$getOwnPropertyDescriptors__default["default"](t)) : _forEachInstanceProperty__default["default"](_context2 = ownKeys(Object(t))).call(_context2, function (r) { _Object$defineProperty__default["default"](e, r, _Object$getOwnPropertyDescriptor__default["default"](t, r)); }); } return e; }
+const getAuthToken = async (mcApiUrl, payload, headers) => {
+  const response = await fetch__default["default"](`${mcApiUrl}/tokens/cli`, {
+    method: 'POST',
+    headers: _objectSpread({
+      Accept: 'application/json',
+      'Content-Type': 'application/json',
+      'x-user-agent': credentialsStorage$1.userAgent
+    }, headers),
+    body: _JSON$stringify__default["default"](payload)
+  });
+  if (!response.ok) {
+    const text = await response.text();
+    let parsed;
+    try {
+      parsed = JSON.parse(text);
+    } catch (error) {}
+    const errorMessage = parsed ? parsed.message : text;
+    throw new Error(errorMessage);
+  }
+  const authToken = await response.json();
+  return authToken;
+};
+
+function createAuthCallbackServer(options) {
+  const server = http__default["default"].createServer(async (request, response) => {
+    try {
+      if (request.url?.includes(`/${options.clientIdentifier}/oidc/callback`)) {
+        const incomingUrl = new _URL__default["default"](request.url, 'http://localhost');
+        const sessionToken = incomingUrl.searchParams.get('sessionToken');
+        const requestedState = incomingUrl.searchParams.get('state');
+        if (!sessionToken) {
+          throw new Error('Invalid authentication flow (missing sessionToken)');
+        }
+        const decodedSessionToken = jwtDecode__default["default"](sessionToken);
+        if (decodedSessionToken?.nonce !== options.nonce) {
+          throw new Error('Invalid authentication flow (nonce mismatch)');
+        }
+        if (requestedState !== options.state) {
+          throw new Error('Invalid authentication flow (state mismatch)');
+        }
+        options.onSuccess({
+          token: sessionToken,
+          expiresAt: decodedSessionToken.exp
+        });
+        response.setHeader('content-type', 'text/html');
+        response.end('Success!');
+        server.close();
+      }
+    } catch (error) {
+      response.setHeader('content-type', 'text/html');
+      if (error instanceof Error) {
+        console.error(error.message);
+        response.end(error.message);
+      } else {
+        console.error(error);
+        response.end(`Invalid authentication flow.`);
+      }
+      server.close();
+    }
+  });
+  return server;
+}
+
+const credentialsStorage = new credentialsStorage$1.CredentialsStorage();
+const port = 3001;
+const clientIdentifier = `mc-scripts-${_package.pkgJson.version}`;
+const startServer = server => new _Promise__default["default"]((resolve, reject) => {
+  server.listen(port).on('listening', resolve).on('error', error => {
+    console.error('Problem starting server', error);
+    return reject(error);
+  }).on('close', () => {
+    process__default["default"].exit();
+  });
+});
+const generateRandomHash = function () {
+  let length = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : 16;
+  return crypto__default["default"].randomBytes(length).toString('hex');
+};
+async function run() {
+  const shouldUseExperimentalIdentityAuthFlow = process__default["default"].env.ENABLE_EXPERIMENTAL_IDENTITY_AUTH_FLOW === 'true';
+  const applicationConfig$1 = await applicationConfig.processConfig();
+  const mcApiUrl = applicationConfig$1.env.mcApiUrl;
+  console.log(`Using Merchant Center environment "${chalk__default["default"].green(mcApiUrl)}".`);
+  console.log();
+  if (credentialsStorage.isSessionValid(mcApiUrl)) {
+    console.log(`You already have a valid session.`);
+    return;
+  }
+  if (shouldUseExperimentalIdentityAuthFlow) {
+    const open = await Promise.resolve().then(function () { return /*#__PURE__*/_interopNamespace(require('open')); });
+    const state = generateRandomHash();
+    const nonce = generateRandomHash();
+    const authUrl = new _URL__default["default"]('/login/authorize', mcApiUrl);
+    authUrl.searchParams.set('response_type', 'id_token');
+    authUrl.searchParams.set('response_mode', 'query');
+    authUrl.searchParams.set('client_id', `__local:${clientIdentifier}`);
+    authUrl.searchParams.set('scope', ['openid'
+    // 'project_key:??',
+    ].join(' '));
+    authUrl.searchParams.set('state', state);
+    authUrl.searchParams.set('nonce', nonce);
+    const server = createAuthCallbackServer({
+      clientIdentifier,
+      state,
+      nonce,
+      onSuccess: tokenContext => {
+        credentialsStorage.setToken(mcApiUrl, tokenContext);
+        console.log();
+        console.log(chalk__default["default"].green(`Login successful.`));
+        console.log();
+      }
+    });
+    await startServer(server);
+    await open.default(authUrl.toString());
+    console.log('Waiting for the OIDC authentication to complete...');
+  } else {
+    console.log(`Enter the login credentials:`);
+    const _await$prompts = await prompts__default["default"]({
+        type: 'text',
+        name: 'email',
+        message: 'Email'
+      }),
+      email = _await$prompts.email;
+    const _await$prompts2 = await prompts__default["default"]({
+        type: 'invisible',
+        name: 'password',
+        message: 'Password (hidden)'
+      }),
+      password = _await$prompts2.password;
+    if (!email || !password) {
+      throw new Error(`Missing email or password values. Aborting.`);
+    }
+    const credentials = await getAuthToken(mcApiUrl, {
+      email,
+      password
+    });
+    credentialsStorage.setToken(mcApiUrl, credentials);
+    console.log(chalk__default["default"].green(`Login successful.`));
+    console.log();
+  }
+}
+
+exports["default"] = run;

package/dist/login-77a5805e.cjs.dev.js

@@ -0,0 +1,217 @@
+'use strict';
+
+var _Promise = require('@babel/runtime-corejs3/core-js-stable/promise');
+var _URL = require('@babel/runtime-corejs3/core-js-stable/url');
+var crypto = require('node:crypto');
+var process = require('node:process');
+var chalk = require('chalk');
+var prompts = require('prompts');
+var applicationConfig = require('@commercetools-frontend/application-config');
+var _package = require('./package-da809c85.cjs.dev.js');
+var _Object$keys = require('@babel/runtime-corejs3/core-js-stable/object/keys');
+var _Object$getOwnPropertySymbols = require('@babel/runtime-corejs3/core-js-stable/object/get-own-property-symbols');
+var _filterInstanceProperty = require('@babel/runtime-corejs3/core-js-stable/instance/filter');
+var _Object$getOwnPropertyDescriptor = require('@babel/runtime-corejs3/core-js-stable/object/get-own-property-descriptor');
+var _forEachInstanceProperty = require('@babel/runtime-corejs3/core-js-stable/instance/for-each');
+var _Object$getOwnPropertyDescriptors = require('@babel/runtime-corejs3/core-js-stable/object/get-own-property-descriptors');
+var _Object$defineProperties = require('@babel/runtime-corejs3/core-js-stable/object/define-properties');
+var _Object$defineProperty = require('@babel/runtime-corejs3/core-js-stable/object/define-property');
+var _defineProperty = require('@babel/runtime-corejs3/helpers/defineProperty');
+var _JSON$stringify = require('@babel/runtime-corejs3/core-js-stable/json/stringify');
+var fetch = require('node-fetch');
+var credentialsStorage$1 = require('./credentials-storage-6d91b6da.cjs.dev.js');
+var http = require('node:http');
+var jwtDecode = require('jwt-decode');
+require('@commercetools/http-user-agent');
+require('@babel/runtime-corejs3/helpers/classCallCheck');
+require('@babel/runtime-corejs3/helpers/createClass');
+require('@babel/runtime-corejs3/core-js-stable/date/now');
+require('node:fs');
+require('node:os');
+require('node:path');
+require('./does-file-exist-eb86baca.cjs.dev.js');
+
+function _interopDefault (e) { return e && e.__esModule ? e : { 'default': e }; }
+
+function _interopNamespace(e) {
+  if (e && e.__esModule) return e;
+  var n = Object.create(null);
+  if (e) {
+    Object.keys(e).forEach(function (k) {
+      if (k !== 'default') {
+        var d = Object.getOwnPropertyDescriptor(e, k);
+        Object.defineProperty(n, k, d.get ? d : {
+          enumerable: true,
+          get: function () { return e[k]; }
+        });
+      }
+    });
+  }
+  n["default"] = e;
+  return Object.freeze(n);
+}
+
+var _Promise__default = /*#__PURE__*/_interopDefault(_Promise);
+var _URL__default = /*#__PURE__*/_interopDefault(_URL);
+var crypto__default = /*#__PURE__*/_interopDefault(crypto);
+var process__default = /*#__PURE__*/_interopDefault(process);
+var chalk__default = /*#__PURE__*/_interopDefault(chalk);
+var prompts__default = /*#__PURE__*/_interopDefault(prompts);
+var _Object$keys__default = /*#__PURE__*/_interopDefault(_Object$keys);
+var _Object$getOwnPropertySymbols__default = /*#__PURE__*/_interopDefault(_Object$getOwnPropertySymbols);
+var _filterInstanceProperty__default = /*#__PURE__*/_interopDefault(_filterInstanceProperty);
+var _Object$getOwnPropertyDescriptor__default = /*#__PURE__*/_interopDefault(_Object$getOwnPropertyDescriptor);
+var _forEachInstanceProperty__default = /*#__PURE__*/_interopDefault(_forEachInstanceProperty);
+var _Object$getOwnPropertyDescriptors__default = /*#__PURE__*/_interopDefault(_Object$getOwnPropertyDescriptors);
+var _Object$defineProperties__default = /*#__PURE__*/_interopDefault(_Object$defineProperties);
+var _Object$defineProperty__default = /*#__PURE__*/_interopDefault(_Object$defineProperty);
+var _JSON$stringify__default = /*#__PURE__*/_interopDefault(_JSON$stringify);
+var fetch__default = /*#__PURE__*/_interopDefault(fetch);
+var http__default = /*#__PURE__*/_interopDefault(http);
+var jwtDecode__default = /*#__PURE__*/_interopDefault(jwtDecode);
+
+function ownKeys(e, r) { var t = _Object$keys__default["default"](e); if (_Object$getOwnPropertySymbols__default["default"]) { var o = _Object$getOwnPropertySymbols__default["default"](e); r && (o = _filterInstanceProperty__default["default"](o).call(o, function (r) { return _Object$getOwnPropertyDescriptor__default["default"](e, r).enumerable; })), t.push.apply(t, o); } return t; }
+function _objectSpread(e) { for (var r = 1; r < arguments.length; r++) { var _context, _context2; var t = null != arguments[r] ? arguments[r] : {}; r % 2 ? _forEachInstanceProperty__default["default"](_context = ownKeys(Object(t), !0)).call(_context, function (r) { _defineProperty(e, r, t[r]); }) : _Object$getOwnPropertyDescriptors__default["default"] ? _Object$defineProperties__default["default"](e, _Object$getOwnPropertyDescriptors__default["default"](t)) : _forEachInstanceProperty__default["default"](_context2 = ownKeys(Object(t))).call(_context2, function (r) { _Object$defineProperty__default["default"](e, r, _Object$getOwnPropertyDescriptor__default["default"](t, r)); }); } return e; }
+const getAuthToken = async (mcApiUrl, payload, headers) => {
+  const response = await fetch__default["default"](`${mcApiUrl}/tokens/cli`, {
+    method: 'POST',
+    headers: _objectSpread({
+      Accept: 'application/json',
+      'Content-Type': 'application/json',
+      'x-user-agent': credentialsStorage$1.userAgent
+    }, headers),
+    body: _JSON$stringify__default["default"](payload)
+  });
+  if (!response.ok) {
+    const text = await response.text();
+    let parsed;
+    try {
+      parsed = JSON.parse(text);
+    } catch (error) {}
+    const errorMessage = parsed ? parsed.message : text;
+    throw new Error(errorMessage);
+  }
+  const authToken = await response.json();
+  return authToken;
+};
+
+function createAuthCallbackServer(options) {
+  const server = http__default["default"].createServer(async (request, response) => {
+    try {
+      if (request.url?.includes(`/${options.clientIdentifier}/oidc/callback`)) {
+        const incomingUrl = new _URL__default["default"](request.url, 'http://localhost');
+        const sessionToken = incomingUrl.searchParams.get('sessionToken');
+        const requestedState = incomingUrl.searchParams.get('state');
+        if (!sessionToken) {
+          throw new Error('Invalid authentication flow (missing sessionToken)');
+        }
+        const decodedSessionToken = jwtDecode__default["default"](sessionToken);
+        if (decodedSessionToken?.nonce !== options.nonce) {
+          throw new Error('Invalid authentication flow (nonce mismatch)');
+        }
+        if (requestedState !== options.state) {
+          throw new Error('Invalid authentication flow (state mismatch)');
+        }
+        options.onSuccess({
+          token: sessionToken,
+          expiresAt: decodedSessionToken.exp
+        });
+        response.setHeader('content-type', 'text/html');
+        response.end('Success!');
+        server.close();
+      }
+    } catch (error) {
+      response.setHeader('content-type', 'text/html');
+      if (error instanceof Error) {
+        console.error(error.message);
+        response.end(error.message);
+      } else {
+        console.error(error);
+        response.end(`Invalid authentication flow.`);
+      }
+      server.close();
+    }
+  });
+  return server;
+}
+
+const credentialsStorage = new credentialsStorage$1.CredentialsStorage();
+const port = 3001;
+const clientIdentifier = `mc-scripts-${_package.pkgJson.version}`;
+const startServer = server => new _Promise__default["default"]((resolve, reject) => {
+  server.listen(port).on('listening', resolve).on('error', error => {
+    console.error('Problem starting server', error);
+    return reject(error);
+  }).on('close', () => {
+    process__default["default"].exit();
+  });
+});
+const generateRandomHash = function () {
+  let length = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : 16;
+  return crypto__default["default"].randomBytes(length).toString('hex');
+};
+async function run() {
+  const shouldUseExperimentalIdentityAuthFlow = process__default["default"].env.ENABLE_EXPERIMENTAL_IDENTITY_AUTH_FLOW === 'true';
+  const applicationConfig$1 = await applicationConfig.processConfig();
+  const mcApiUrl = applicationConfig$1.env.mcApiUrl;
+  console.log(`Using Merchant Center environment "${chalk__default["default"].green(mcApiUrl)}".`);
+  console.log();
+  if (credentialsStorage.isSessionValid(mcApiUrl)) {
+    console.log(`You already have a valid session.`);
+    return;
+  }
+  if (shouldUseExperimentalIdentityAuthFlow) {
+    const open = await Promise.resolve().then(function () { return /*#__PURE__*/_interopNamespace(require('open')); });
+    const state = generateRandomHash();
+    const nonce = generateRandomHash();
+    const authUrl = new _URL__default["default"]('/login/authorize', mcApiUrl);
+    authUrl.searchParams.set('response_type', 'id_token');
+    authUrl.searchParams.set('response_mode', 'query');
+    authUrl.searchParams.set('client_id', `__local:${clientIdentifier}`);
+    authUrl.searchParams.set('scope', ['openid'
+    // 'project_key:??',
+    ].join(' '));
+    authUrl.searchParams.set('state', state);
+    authUrl.searchParams.set('nonce', nonce);
+    const server = createAuthCallbackServer({
+      clientIdentifier,
+      state,
+      nonce,
+      onSuccess: tokenContext => {
+        credentialsStorage.setToken(mcApiUrl, tokenContext);
+        console.log();
+        console.log(chalk__default["default"].green(`Login successful.`));
+        console.log();
+      }
+    });
+    await startServer(server);
+    await open.default(authUrl.toString());
+    console.log('Waiting for the OIDC authentication to complete...');
+  } else {
+    console.log(`Enter the login credentials:`);
+    const _await$prompts = await prompts__default["default"]({
+        type: 'text',
+        name: 'email',
+        message: 'Email'
+      }),
+      email = _await$prompts.email;
+    const _await$prompts2 = await prompts__default["default"]({
+        type: 'invisible',
+        name: 'password',
+        message: 'Password (hidden)'
+      }),
+      password = _await$prompts2.password;
+    if (!email || !password) {
+      throw new Error(`Missing email or password values. Aborting.`);
+    }
+    const credentials = await getAuthToken(mcApiUrl, {
+      email,
+      password
+    });
+    credentialsStorage.setToken(mcApiUrl, credentials);
+    console.log(chalk__default["default"].green(`Login successful.`));
+    console.log();
+  }
+}
+
+exports["default"] = run;