@tonbo/cli 0.15.0 → 0.16.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -1
- package/dist/bin/tonbo.js +526 -161
- package/package.json +2 -2
package/README.md
CHANGED
|
@@ -20,7 +20,7 @@ tonbo database list --account acme
|
|
|
20
20
|
|
|
21
21
|
## Sign in
|
|
22
22
|
|
|
23
|
-
`tonbo login` signs this computer in as you, once ([ADR-0018](../../apps/user-center/docs/decisions/adr-0018-one-cli-login-per-person.md)): every account you belong to is reachable with `--account <name>`, with your role in each, and joining an organization needs no new login. A command acts in `--account`, else `TONBO_ACCOUNT`, else the default `tonbo account use <name>` sets, else your personal account; `tonbo account list` lists your accounts. For each request the CLI exchanges the login for a short-lived token of that one account, so the login itself never reaches a resource server. It works only on the computer that logged in, ends after 30 days unused or 180 days at most, and is listed and revoked on the console's Sign-in sessions page. `TONBO_API_KEY` takes its place for CI and Agents: an API key reaches only its own account.
|
|
23
|
+
`tonbo login` signs this computer in as you, once ([ADR-0018](../../apps/user-center/docs/decisions/adr-0018-one-cli-login-per-person.md)): every account you belong to is reachable with `--account <name>`, with your role in each, and joining an organization needs no new login. A command acts in `--account`, else `TONBO_ACCOUNT`, else the default `tonbo account use <name>` sets, else your personal account; `tonbo account list` lists your accounts. For each request the CLI exchanges the login for a short-lived token of that one account, so the login itself never reaches a resource server. It works only on the computer that logged in, ends after 30 days unused or 180 days at most, and is listed and revoked on the console's Sign-in sessions page. `TONBO_API_KEY` takes its place for CI and Agents: an API key reaches only its own account. A personal key goes to the Management API as it is; an Agent key, which no resource server accepts directly, answers `401 exchange_required` and is then exchanged at `POST /api/iam/token` for a token kept in memory until a minute before its 10-minute expiry, as the Tonbo SDK does (`apiKeyBearer` in `@tonbo/cli-core`).
|
|
24
24
|
|
|
25
25
|
The login file, `login.json`, and the device id it is tied to are shared with [`yield`](../yield) through `@tonbo/cli-core`, by the contract [`credentials-v2.json`](../../contracts/cli/credentials-v2.json). A login an earlier release saved, `credentials.json` ([`credentials-v1.json`](../../contracts/cli/credentials-v1.json)), is read only when there is no `login.json`.
|
|
26
26
|
|