@sasjs/cli 4.18.6 → 4.20.0

package/build/commands/add/spec/addCommand.spec.js

@@ -200,27 +200,6 @@ describe('AddCommand - cred', function () {
         expect(command.subCommand).toEqual('cred');
         expect(command.insecure).toEqual(true);
     });
-    it('should parse a sasjs add cred command invoked with the alias sasjs auth', function () {
-        var args = __spreadArray(__spreadArray([], __read(defaultArgs), false), ['auth', '-i'], false);
-        var command = new addCommand_1.AddCommand(args);
-        expect(command.name).toEqual('add');
-        expect(command.insecure).toEqual(true);
-    });
-    it('should call the addCredential handler when executed with the alias sasjs auth', function () { return __awaiter(void 0, void 0, void 0, function () {
-        var args, command;
-        return __generator(this, function (_a) {
-            switch (_a.label) {
-                case 0:
-                    args = __spreadArray(__spreadArray([], __read(defaultArgs), false), ['auth', '-t', 'test'], false);
-                    command = new addCommand_1.AddCommand(args);
-                    return [4 /*yield*/, command.execute()];
-                case 1:
-                    _a.sent();
-                    expect(addCredentialModule.addCredential).toHaveBeenCalledWith(target, false, types_1.TargetScope.Local);
-                    return [2 /*return*/];
-            }
-        });
-    }); });
     it('should call the addCredential handler when executed without the insecure option', function () { return __awaiter(void 0, void 0, void 0, function () {
         var args, command;
         return __generator(this, function (_a) {

package/build/commands/auth/authCommand.d.ts

@@ -0,0 +1,10 @@
+import { ReturnCode } from '../../types/command';
+import { TargetCommand } from '../../types/command/targetCommand';
+export declare class AuthCommand extends TargetCommand {
+    constructor(args: string[]);
+    get insecure(): boolean;
+    get passwordStdin(): boolean;
+    execute(): Promise<ReturnCode.Success | ReturnCode.InternalError>;
+    executeLogin(): Promise<ReturnCode.Success | ReturnCode.InternalError>;
+    executeCred(): Promise<ReturnCode.Success | ReturnCode.InternalError>;
+}

package/build/commands/auth/authCommand.js

@@ -0,0 +1,207 @@
+"use strict";
+var __extends = (this && this.__extends) || (function () {
+    var extendStatics = function (d, b) {
+        extendStatics = Object.setPrototypeOf ||
+            ({ __proto__: [] } instanceof Array && function (d, b) { d.__proto__ = b; }) ||
+            function (d, b) { for (var p in b) if (Object.prototype.hasOwnProperty.call(b, p)) d[p] = b[p]; };
+        return extendStatics(d, b);
+    };
+    return function (d, b) {
+        if (typeof b !== "function" && b !== null)
+            throw new TypeError("Class extends value " + String(b) + " is not a constructor or null");
+        extendStatics(d, b);
+        function __() { this.constructor = d; }
+        d.prototype = b === null ? Object.create(b) : (__.prototype = b.prototype, new __());
+    };
+})();
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthCommand = void 0;
+var types_1 = require("../../types");
+var command_1 = require("../../types/command");
+var targetCommand_1 = require("../../types/command/targetCommand");
+var addCredential_1 = require("../add/addCredential");
+var login_1 = require("./login");
+var AuthSubCommand;
+(function (AuthSubCommand) {
+    AuthSubCommand["Login"] = "login";
+})(AuthSubCommand || (AuthSubCommand = {}));
+// The syntax here uses square brackets for the subCommand (i.e. makes it
+// optional) since `sasjs auth` without a subCommand retains its historical
+// behaviour (it used to be an alias of `sasjs add cred`).
+var syntax = 'auth [subCommand] [options]';
+var usage = 'sasjs auth login --target <target-name> | sasjs auth [options]';
+var description = "Authenticates against the specified target.\n" +
+    "With the 'login' subCommand, authentication is performed with a SAS username and password " +
+    "(no OAuth client/secret required, SASVIYA targets only) and the resulting tokens are saved.\n" +
+    "Without a subCommand, behaves like 'sasjs add cred' (client/secret based authentication).\n" +
+    "\n" +
+    "Non-interactive use (CI/agents): set SAS_USERNAME and SAS_PASSWORD environment variables, " +
+    "or pipe the password and use --password-stdin.";
+var examples = [
+    {
+        command: 'sasjs auth login --target <target-name>',
+        description: 'Logs in with SAS username/password (no client/secret required).'
+    },
+    {
+        command: 'sasjs auth login -t <target-name>',
+        description: ''
+    },
+    {
+        command: 'SAS_USERNAME=usr SAS_PASSWORD=pass sasjs auth login -t <target-name>',
+        description: 'Non-interactive: read credentials from SAS_USERNAME/SAS_PASSWORD env vars (CI/agents).'
+    },
+    {
+        command: 'echo "$SAS_PASSWORD" | sasjs auth login --password-stdin -t <target-name>',
+        description: 'Non-interactive: read the password from stdin (avoids shell history).'
+    },
+    {
+        command: 'sasjs auth --target <target-name>',
+        description: 'Legacy behaviour, equivalent to `sasjs add cred`.'
+    }
+];
+var AuthCommand = /** @class */ (function (_super) {
+    __extends(AuthCommand, _super);
+    function AuthCommand(args) {
+        var parseOptions = {
+            insecure: {
+                type: 'boolean',
+                alias: 'i',
+                default: false,
+                description: 'Allows the command to bypass the HTTPs requirement. Not recommended.'
+            },
+            passwordStdin: {
+                type: 'boolean',
+                default: false,
+                description: 'Read the password from stdin instead of prompting or reading the ' +
+                    'SAS_PASSWORD env var. Use this in CI/scripts to avoid leaking the ' +
+                    'password in shell history (e.g. ' +
+                    '`echo "$SAS_PASSWORD" | sasjs auth login --password-stdin -t <target>`).'
+            }
+        };
+        return _super.call(this, args, { parseOptions: parseOptions, usage: usage, description: description, examples: examples, syntax: syntax }) || this;
+    }
+    Object.defineProperty(AuthCommand.prototype, "insecure", {
+        get: function () {
+            return !!this.parsed.insecure;
+        },
+        enumerable: false,
+        configurable: true
+    });
+    Object.defineProperty(AuthCommand.prototype, "passwordStdin", {
+        get: function () {
+            return !!this.parsed.passwordStdin;
+        },
+        enumerable: false,
+        configurable: true
+    });
+    AuthCommand.prototype.execute = function () {
+        return __awaiter(this, void 0, void 0, function () {
+            var _a;
+            return __generator(this, function (_b) {
+                switch (_b.label) {
+                    case 0:
+                        if (!(this.subCommand === AuthSubCommand.Login)) return [3 /*break*/, 2];
+                        return [4 /*yield*/, this.executeLogin()];
+                    case 1:
+                        _a = _b.sent();
+                        return [3 /*break*/, 4];
+                    case 2: return [4 /*yield*/, this.executeCred()];
+                    case 3:
+                        _a = _b.sent();
+                        _b.label = 4;
+                    case 4: return [2 /*return*/, _a];
+                }
+            });
+        });
+    };
+    AuthCommand.prototype.executeLogin = function () {
+        var _a;
+        return __awaiter(this, void 0, void 0, function () {
+            var target, err_1;
+            return __generator(this, function (_b) {
+                switch (_b.label) {
+                    case 0: return [4 /*yield*/, this.getTargetInfo()];
+                    case 1:
+                        target = (_b.sent()).target;
+                        _b.label = 2;
+                    case 2:
+                        _b.trys.push([2, 4, , 5]);
+                        return [4 /*yield*/, (0, login_1.authLogin)(target, this.insecure, this.passwordStdin)];
+                    case 3:
+                        _b.sent();
+                        return [2 /*return*/, command_1.ReturnCode.Success];
+                    case 4:
+                        err_1 = _b.sent();
+                        (_a = process.logger) === null || _a === void 0 ? void 0 : _a.error('Error logging in.', (err_1 === null || err_1 === void 0 ? void 0 : err_1.message) || err_1);
+                        return [2 /*return*/, command_1.ReturnCode.InternalError];
+                    case 5: return [2 /*return*/];
+                }
+            });
+        });
+    };
+    AuthCommand.prototype.executeCred = function () {
+        var _a, _b;
+        return __awaiter(this, void 0, void 0, function () {
+            var _c, target, isLocal, scope, err_2;
+            return __generator(this, function (_d) {
+                switch (_d.label) {
+                    case 0: return [4 /*yield*/, this.getTargetInfo()];
+                    case 1:
+                        _c = _d.sent(), target = _c.target, isLocal = _c.isLocal;
+                        scope = isLocal ? types_1.TargetScope.Local : types_1.TargetScope.Global;
+                        _d.label = 2;
+                    case 2:
+                        _d.trys.push([2, 4, , 5]);
+                        return [4 /*yield*/, (0, addCredential_1.addCredential)(target, this.insecure, scope)];
+                    case 3:
+                        _d.sent();
+                        (_a = process.logger) === null || _a === void 0 ? void 0 : _a.success('Credentials successfully added!');
+                        return [2 /*return*/, command_1.ReturnCode.Success];
+                    case 4:
+                        err_2 = _d.sent();
+                        (_b = process.logger) === null || _b === void 0 ? void 0 : _b.error('Error adding credentials.', err_2.toString());
+                        return [2 /*return*/, command_1.ReturnCode.InternalError];
+                    case 5: return [2 /*return*/];
+                }
+            });
+        });
+    };
+    return AuthCommand;
+}(targetCommand_1.TargetCommand));
+exports.AuthCommand = AuthCommand;

package/build/commands/auth/login.d.ts

@@ -0,0 +1,33 @@
+import { Target } from '@sasjs/utils';
+/**
+ * Authenticates against a SASVIYA target using a SAS username and password
+ * (OAuth2 resource owner password grant against the built-in, secret-less
+ * `sas.cli` client) and persists the resulting token pair. This enables all
+ * authenticated commands (`sasjs run`, `sasjs deploy`, etc.) on estates where
+ * no administrator-registered OAuth client/secret is available.
+ *
+ * Credentials are resolved in this order (highest precedence first):
+ *
+ *   Username:  SAS_USERNAME env var  >  interactive prompt (TTY only)
+ *   Password:  --password-stdin      >  SAS_PASSWORD env var  >  interactive prompt (TTY only)
+ *
+ * When `--password-stdin` is set, stdin is consumed for the password, so the
+ * username MUST come from the SAS_USERNAME env var (interactive prompting is
+ * not possible because stdin is already redirected).
+ *
+ * If no TTY is available and no env var / stdin flag supplies the credential,
+ * the function throws with a message pointing the caller at the env vars or
+ * `--password-stdin` flag — this makes `sasjs auth login` safe to call from
+ * CI pipelines and non-interactive agents.
+ *
+ * The password is used only to mint the tokens and is never stored. When the
+ * access token expires, re-run `sasjs auth login -t <target>`.
+ * @param {Target} target - the target to authenticate against.
+ * @param {boolean} insecure - when true, bypasses TLS certificate validation
+ *   (for self-signed cert Viya servers). Mirrors the `--insecure` flag on
+ *   `sasjs add cred`.
+ * @param {boolean} passwordStdin - when true, reads the password from stdin
+ *   (like `docker login --password-stdin`) instead of prompting or reading
+ *   the SAS_PASSWORD env var. The username must then come from SAS_USERNAME.
+ */
+export declare const authLogin: (target: Target, insecure?: boolean, passwordStdin?: boolean) => Promise<void>;

package/build/commands/auth/login.js

@@ -0,0 +1,237 @@
+"use strict";
+var __assign = (this && this.__assign) || function () {
+    __assign = Object.assign || function(t) {
+        for (var s, i = 1, n = arguments.length; i < n; i++) {
+            s = arguments[i];
+            for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p))
+                t[p] = s[p];
+        }
+        return t;
+    };
+    return __assign.apply(this, arguments);
+};
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+var __asyncValues = (this && this.__asyncValues) || function (o) {
+    if (!Symbol.asyncIterator) throw new TypeError("Symbol.asyncIterator is not defined.");
+    var m = o[Symbol.asyncIterator], i;
+    return m ? m.call(o) : (o = typeof __values === "function" ? __values(o) : o[Symbol.iterator](), i = {}, verb("next"), verb("throw"), verb("return"), i[Symbol.asyncIterator] = function () { return this; }, i);
+    function verb(n) { i[n] = o[n] && function (v) { return new Promise(function (resolve, reject) { v = o[n](v), settle(resolve, reject, v.done, v.value); }); }; }
+    function settle(resolve, reject, d, v) { Promise.resolve(v).then(function(v) { resolve({ value: v, done: d }); }, reject); }
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.authLogin = void 0;
+var prompts_1 = __importDefault(require("prompts"));
+var utils_1 = require("@sasjs/utils");
+var utils_2 = require("../../utils");
+/**
+ * Reads a single line/value from stdin until EOF or newline, then trims
+ * trailing whitespace. Used by the `--password-stdin` flow so passwords can
+ * be piped without appearing in shell history or process argument lists.
+ */
+var readPasswordFromStdin = function () { return __awaiter(void 0, void 0, void 0, function () {
+    var data, _a, _b, _c, chunk, e_1_1;
+    var _d, e_1, _e, _f;
+    return __generator(this, function (_g) {
+        switch (_g.label) {
+            case 0:
+                data = '';
+                _g.label = 1;
+            case 1:
+                _g.trys.push([1, 6, 7, 12]);
+                _a = true, _b = __asyncValues(process.stdin);
+                _g.label = 2;
+            case 2: return [4 /*yield*/, _b.next()];
+            case 3:
+                if (!(_c = _g.sent(), _d = _c.done, !_d)) return [3 /*break*/, 5];
+                _f = _c.value;
+                _a = false;
+                try {
+                    chunk = _f;
+                    data += chunk.toString();
+                }
+                finally {
+                    _a = true;
+                }
+                _g.label = 4;
+            case 4: return [3 /*break*/, 2];
+            case 5: return [3 /*break*/, 12];
+            case 6:
+                e_1_1 = _g.sent();
+                e_1 = { error: e_1_1 };
+                return [3 /*break*/, 12];
+            case 7:
+                _g.trys.push([7, , 10, 11]);
+                if (!(!_a && !_d && (_e = _b.return))) return [3 /*break*/, 9];
+                return [4 /*yield*/, _e.call(_b)];
+            case 8:
+                _g.sent();
+                _g.label = 9;
+            case 9: return [3 /*break*/, 11];
+            case 10:
+                if (e_1) throw e_1.error;
+                return [7 /*endfinally*/];
+            case 11: return [7 /*endfinally*/];
+            case 12: 
+            // Trim trailing newline/carriage-return only; leading/trailing spaces are
+            // intentionally preserved in case a password genuinely contains them.
+            return [2 /*return*/, data.replace(/[\r\n]+$/g, '')];
+        }
+    });
+}); };
+/**
+ * Authenticates against a SASVIYA target using a SAS username and password
+ * (OAuth2 resource owner password grant against the built-in, secret-less
+ * `sas.cli` client) and persists the resulting token pair. This enables all
+ * authenticated commands (`sasjs run`, `sasjs deploy`, etc.) on estates where
+ * no administrator-registered OAuth client/secret is available.
+ *
+ * Credentials are resolved in this order (highest precedence first):
+ *
+ *   Username:  SAS_USERNAME env var  >  interactive prompt (TTY only)
+ *   Password:  --password-stdin      >  SAS_PASSWORD env var  >  interactive prompt (TTY only)
+ *
+ * When `--password-stdin` is set, stdin is consumed for the password, so the
+ * username MUST come from the SAS_USERNAME env var (interactive prompting is
+ * not possible because stdin is already redirected).
+ *
+ * If no TTY is available and no env var / stdin flag supplies the credential,
+ * the function throws with a message pointing the caller at the env vars or
+ * `--password-stdin` flag — this makes `sasjs auth login` safe to call from
+ * CI pipelines and non-interactive agents.
+ *
+ * The password is used only to mint the tokens and is never stored. When the
+ * access token expires, re-run `sasjs auth login -t <target>`.
+ * @param {Target} target - the target to authenticate against.
+ * @param {boolean} insecure - when true, bypasses TLS certificate validation
+ *   (for self-signed cert Viya servers). Mirrors the `--insecure` flag on
+ *   `sasjs add cred`.
+ * @param {boolean} passwordStdin - when true, reads the password from stdin
+ *   (like `docker login --password-stdin`) instead of prompting or reading
+ *   the SAS_PASSWORD env var. The username must then come from SAS_USERNAME.
+ */
+var authLogin = function (target, insecure, passwordStdin) {
+    if (insecure === void 0) { insecure = false; }
+    if (passwordStdin === void 0) { passwordStdin = false; }
+    return __awaiter(void 0, void 0, void 0, function () {
+        var isTty, envUser, envPass, user, hint, pass, promptedPass, _a, access_token, refresh_token, _b, id, name;
+        var _c, _d, _e;
+        return __generator(this, function (_f) {
+            switch (_f.label) {
+                case 0:
+                    if (target.serverType !== utils_1.ServerType.SasViya) {
+                        throw new Error("'sasjs auth login' is only supported for SASVIYA targets. " +
+                            "Target '".concat(target.name, "' is of type '").concat(target.serverType, "'. ") +
+                            "Use 'sasjs add cred -t ".concat(target.name, "' instead."));
+                    }
+                    if (!target.serverUrl) {
+                        throw new Error("Target '".concat(target.name, "' does not have a serverUrl configured."));
+                    }
+                    if (insecure) {
+                        target = new utils_1.Target(__assign(__assign({}, target.toJson(false)), { httpsAgentOptions: __assign(__assign({}, target.httpsAgentOptions), { allowInsecureRequests: true, rejectUnauthorized: false }) }));
+                        (_c = process.logger) === null || _c === void 0 ? void 0 : _c.warn('Executing with insecure connection.');
+                    }
+                    isTty = !!process.stdin.isTTY;
+                    envUser = process.env.SAS_USERNAME;
+                    envPass = process.env.SAS_PASSWORD;
+                    if (!envUser) return [3 /*break*/, 1];
+                    user = envUser;
+                    return [3 /*break*/, 4];
+                case 1:
+                    if (!(isTty && !passwordStdin)) return [3 /*break*/, 3];
+                    return [4 /*yield*/, (0, utils_1.getString)('Please enter your SAS username', function (v) { return !!v || 'Username is required.'; })];
+                case 2:
+                    user = _f.sent();
+                    return [3 /*break*/, 4];
+                case 3:
+                    hint = passwordStdin
+                        ? "When using --password-stdin, the username must be provided via the SAS_USERNAME environment variable (stdin is used for the password)."
+                        : "No TTY is available for an interactive prompt. Set the SAS_USERNAME environment variable (and SAS_PASSWORD, or use --password-stdin).";
+                    throw new Error("A SAS username is required but was not provided. ".concat(hint));
+                case 4:
+                    if (!passwordStdin) return [3 /*break*/, 6];
+                    return [4 /*yield*/, readPasswordFromStdin()];
+                case 5:
+                    pass = _f.sent();
+                    if (!pass) {
+                        throw new Error("--password-stdin was specified but no password was read from stdin. " +
+                            "Pipe the password, e.g. echo \"$SAS_PASSWORD\" | sasjs auth login --password-stdin -t ".concat(target.name, "."));
+                    }
+                    return [3 /*break*/, 10];
+                case 6:
+                    if (!envPass) return [3 /*break*/, 7];
+                    pass = envPass;
+                    return [3 /*break*/, 10];
+                case 7:
+                    if (!isTty) return [3 /*break*/, 9];
+                    return [4 /*yield*/, (0, prompts_1.default)({
+                            type: 'password',
+                            name: 'pass',
+                            message: 'Please enter your SAS password'
+                        }, {
+                            onCancel: function () {
+                                throw new Error('Input cancelled.');
+                            }
+                        })];
+                case 8:
+                    promptedPass = (_f.sent()).pass;
+                    pass = promptedPass;
+                    return [3 /*break*/, 10];
+                case 9: throw new Error("A SAS password is required but was not provided. " +
+                    "Set the SAS_PASSWORD environment variable, or pipe the password and use --password-stdin " +
+                    "(e.g. echo \"$SAS_PASSWORD\" | sasjs auth login --password-stdin -t ".concat(target.name, ")."));
+                case 10: return [4 /*yield*/, (0, utils_2.getTokensWithPasswordGrant)(target, user, pass)];
+                case 11:
+                    _a = _f.sent(), access_token = _a.access_token, refresh_token = _a.refresh_token;
+                    return [4 /*yield*/, (0, utils_2.fetchLoggedInUser)(target, access_token)];
+                case 12:
+                    _b = _f.sent(), id = _b.id, name = _b.name;
+                    return [4 /*yield*/, (0, utils_2.saveTokens)(target.name, access_token, refresh_token || '')];
+                case 13:
+                    _f.sent();
+                    (_d = process.logger) === null || _d === void 0 ? void 0 : _d.success("Logged in as ".concat(id || 'unknown user').concat(name ? " (".concat(name, ")") : '', " on ").concat(target.serverUrl, "."));
+                    (_e = process.logger) === null || _e === void 0 ? void 0 : _e.info("The access token is valid for the duration configured on the server (12 hours by default). " +
+                        "When it expires, re-run 'sasjs auth login -t ".concat(target.name, "'."));
+                    return [2 /*return*/];
+            }
+        });
+    });
+};
+exports.authLogin = authLogin;

package/build/commands/auth/spec/authCommand.spec.d.ts

@@ -0,0 +1 @@
+export {};