carto-cli 0.1.0-rc.1

package/dist/commands/credentials.js

@@ -0,0 +1,606 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.credentialsList = credentialsList;
+exports.credentialsCreateToken = credentialsCreateToken;
+exports.credentialsCreateSPA = credentialsCreateSPA;
+exports.credentialsCreateM2M = credentialsCreateM2M;
+exports.credentialsGetToken = credentialsGetToken;
+exports.credentialsGetOAuth = credentialsGetOAuth;
+exports.credentialsUpdateToken = credentialsUpdateToken;
+exports.credentialsUpdateOAuth = credentialsUpdateOAuth;
+exports.credentialsDeleteToken = credentialsDeleteToken;
+exports.credentialsDeleteOAuth = credentialsDeleteOAuth;
+const api_1 = require("../api");
+const colors_1 = require("../colors");
+const prompt_1 = require("../prompt");
+/**
+ * List all credentials or specific type
+ */
+async function credentialsList(type, options, token, baseUrl, jsonOutput, debug = false, profile) {
+    try {
+        const client = await api_1.ApiClient.create(token, baseUrl, debug, profile);
+        const results = {};
+        // Determine what to list
+        const listTokens = !type || type === 'tokens';
+        const listSPA = !type || type === 'spa' || type === 'oauth';
+        const listM2M = !type || type === 'm2m' || type === 'oauth';
+        // Fetch API Access Tokens
+        if (listTokens) {
+            try {
+                const tokens = await client.get('/v3/tokens');
+                results.tokens = Array.isArray(tokens) ? tokens : (tokens.data || tokens.results || []);
+            }
+            catch (err) {
+                results.tokens = [];
+                results.tokensError = err.message;
+            }
+        }
+        // Fetch SPA OAuth Clients
+        if (listSPA) {
+            try {
+                const spaClients = await client.getAccounts('/oauth-clients?type=spa');
+                results.spa = Array.isArray(spaClients) ? spaClients : [];
+            }
+            catch (err) {
+                results.spa = [];
+                results.spaError = err.message;
+            }
+        }
+        // Fetch M2M OAuth Clients
+        if (listM2M) {
+            try {
+                const m2mClients = await client.getAccounts('/oauth-clients?type=m2m');
+                results.m2m = Array.isArray(m2mClients) ? m2mClients : [];
+            }
+            catch (err) {
+                results.m2m = [];
+                results.m2mError = err.message;
+            }
+        }
+        if (jsonOutput) {
+            console.log(JSON.stringify(results));
+        }
+        else {
+            // Display API Access Tokens
+            if (results.tokens) {
+                console.log((0, colors_1.bold)(`\n=== API Access Tokens (${results.tokens.length}) ===\n`));
+                if (results.tokens.length === 0) {
+                    console.log((0, colors_1.dim)('  No API Access Tokens found'));
+                }
+                else {
+                    results.tokens.forEach((t) => {
+                        console.log((0, colors_1.bold)('Token: ') + t.token.substring(0, 20) + '...');
+                        console.log('  Allowed APIs: ' + (t.allowed_apis || []).join(', '));
+                        if (t.grants && t.grants.length > 0) {
+                            console.log('  Grants:');
+                            t.grants.forEach((grant) => {
+                                console.log(`    - ${grant.connection_name} → ${grant.source}`);
+                            });
+                        }
+                        console.log('  Created: ' + new Date(t.created_at).toLocaleString());
+                        console.log('');
+                    });
+                }
+            }
+            if (results.tokensError) {
+                console.log((0, colors_1.error)(`  Error fetching tokens: ${results.tokensError}`));
+            }
+            // Display SPA OAuth Clients
+            if (results.spa) {
+                console.log((0, colors_1.bold)(`\n=== SPA OAuth Clients (${results.spa.length}) ===\n`));
+                if (results.spa.length === 0) {
+                    console.log((0, colors_1.dim)('  No SPA OAuth Clients found'));
+                }
+                else {
+                    results.spa.forEach((client) => {
+                        console.log((0, colors_1.bold)(client.title) + (0, colors_1.dim)(` (${client.client_id})`));
+                        console.log('  Type: SPA');
+                        console.log('  Created: ' + new Date(client.createdAt).toLocaleString());
+                        console.log('');
+                    });
+                }
+            }
+            if (results.spaError) {
+                console.log((0, colors_1.error)(`  Error fetching SPA clients: ${results.spaError}`));
+            }
+            // Display M2M OAuth Clients
+            if (results.m2m) {
+                console.log((0, colors_1.bold)(`\n=== M2M OAuth Clients (${results.m2m.length}) ===\n`));
+                if (results.m2m.length === 0) {
+                    console.log((0, colors_1.dim)('  No M2M OAuth Clients found'));
+                }
+                else {
+                    results.m2m.forEach((client) => {
+                        console.log((0, colors_1.bold)(client.title) + (0, colors_1.dim)(` (${client.client_id})`));
+                        console.log('  Type: M2M');
+                        console.log('  Created: ' + new Date(client.createdAt).toLocaleString());
+                        console.log('');
+                    });
+                }
+            }
+            if (results.m2mError) {
+                console.log((0, colors_1.error)(`  Error fetching M2M clients: ${results.m2mError}`));
+            }
+        }
+    }
+    catch (err) {
+        if (jsonOutput) {
+            console.log(JSON.stringify({ success: false, error: err.message }));
+        }
+        else {
+            console.log((0, colors_1.error)('✗ Failed to list credentials: ' + err.message));
+        }
+        process.exit(1);
+    }
+}
+/**
+ * Create API Access Token
+ */
+async function credentialsCreateToken(options, token, baseUrl, jsonOutput, debug = false, profile) {
+    try {
+        const client = await api_1.ApiClient.create(token, baseUrl, debug, profile);
+        // Build request body from options
+        let body;
+        if (options.jsonBody) {
+            // Use raw JSON body
+            body = JSON.parse(options.jsonBody);
+        }
+        else {
+            // Build body from flags
+            body = {
+                grants: [],
+                allowed_apis: [],
+                referers: []
+            };
+            // Parse grants (connection and source pairs)
+            if (options.connection && options.source) {
+                if (Array.isArray(options.connection)) {
+                    for (let i = 0; i < options.connection.length; i++) {
+                        body.grants.push({
+                            connection_name: options.connection[i],
+                            source: options.source[i] || '*'
+                        });
+                    }
+                }
+                else {
+                    body.grants.push({
+                        connection_name: options.connection,
+                        source: options.source
+                    });
+                }
+            }
+            // Parse APIs
+            if (options.apis) {
+                body.allowed_apis = options.apis.split(',').map((a) => a.trim());
+            }
+            // Parse referers
+            if (options.referers) {
+                body.referers = options.referers.split(',').map((r) => r.trim());
+            }
+            else if (options.referer) {
+                body.referers = [options.referer];
+            }
+            // Validation
+            if (body.grants.length === 0) {
+                throw new Error('At least one grant is required. Use --connection and --source flags.');
+            }
+            if (body.allowed_apis.length === 0) {
+                throw new Error('At least one API is required. Use --apis flag (e.g., --apis sql,maps,imports)');
+            }
+        }
+        const result = await client.post('/v3/tokens', body);
+        if (jsonOutput) {
+            console.log(JSON.stringify(result));
+        }
+        else {
+            console.log((0, colors_1.success)('\n✓ API Access Token created successfully\n'));
+            console.log((0, colors_1.bold)('Token: ') + result.token);
+            console.log((0, colors_1.bold)('Allowed APIs: ') + result.allowed_apis.join(', '));
+            if (result.grants && result.grants.length > 0) {
+                console.log((0, colors_1.bold)('\nGrants:'));
+                result.grants.forEach((grant) => {
+                    console.log(`  - ${grant.connection_name} → ${grant.source}`);
+                });
+            }
+            if (result.referers && result.referers.length > 0) {
+                console.log((0, colors_1.bold)('\nReferers:'));
+                result.referers.forEach((ref) => {
+                    console.log(`  - ${ref}`);
+                });
+            }
+            console.log('');
+        }
+    }
+    catch (err) {
+        if (jsonOutput) {
+            console.log(JSON.stringify({ success: false, error: err.message }));
+        }
+        else {
+            console.log((0, colors_1.error)('✗ Failed to create token: ' + err.message));
+        }
+        process.exit(1);
+    }
+}
+/**
+ * Create SPA OAuth Client
+ */
+async function credentialsCreateSPA(options, token, baseUrl, jsonOutput, debug = false, profile) {
+    try {
+        const client = await api_1.ApiClient.create(token, baseUrl, debug, profile);
+        // Build request body
+        let body;
+        if (options.jsonBody) {
+            body = JSON.parse(options.jsonBody);
+            body.type = 'spa';
+        }
+        else {
+            body = {
+                type: 'spa',
+                title: options.title,
+                initiate_login_uri: options.loginUri,
+                callbacks: options.callback || options.callbacks,
+                allowed_logout_urls: options.logoutUrl || options.allowedLogoutUrls,
+                web_origins: options.webOrigin || options.webOrigins,
+                allowed_origins: options.allowedOrigin || options.allowedOrigins
+            };
+            // Validation
+            if (!body.title) {
+                throw new Error('Title is required. Use --title flag.');
+            }
+        }
+        const result = await client.postAccounts('/oauth-clients', body);
+        if (jsonOutput) {
+            console.log(JSON.stringify(result));
+        }
+        else {
+            console.log((0, colors_1.success)('\n✓ SPA OAuth Client created successfully\n'));
+            console.log((0, colors_1.bold)('Client ID: ') + result.id);
+            console.log((0, colors_1.bold)('Title: ') + body.title);
+            console.log((0, colors_1.bold)('Type: ') + 'spa');
+            console.log('');
+            console.log((0, colors_1.info)('Use this Client ID in your single-page application to authenticate users.'));
+            console.log('');
+        }
+    }
+    catch (err) {
+        if (jsonOutput) {
+            console.log(JSON.stringify({ success: false, error: err.message }));
+        }
+        else {
+            console.log((0, colors_1.error)('✗ Failed to create SPA client: ' + err.message));
+        }
+        process.exit(1);
+    }
+}
+/**
+ * Create M2M OAuth Client
+ */
+async function credentialsCreateM2M(options, token, baseUrl, jsonOutput, debug = false, profile) {
+    try {
+        const client = await api_1.ApiClient.create(token, baseUrl, debug, profile);
+        // Build request body
+        let body;
+        if (options.jsonBody) {
+            body = JSON.parse(options.jsonBody);
+            body.type = 'm2m';
+        }
+        else {
+            body = {
+                type: 'm2m',
+                title: options.title
+            };
+            // Validation
+            if (!body.title) {
+                throw new Error('Title is required. Use --title flag.');
+            }
+        }
+        const result = await client.postAccounts('/oauth-clients', body);
+        if (jsonOutput) {
+            console.log(JSON.stringify(result));
+        }
+        else {
+            console.log((0, colors_1.success)('\n✓ M2M OAuth Client created successfully\n'));
+            console.log((0, colors_1.bold)('Client ID: ') + result.id);
+            console.log((0, colors_1.bold)('Title: ') + body.title);
+            console.log((0, colors_1.bold)('Type: ') + 'm2m');
+            console.log('');
+            if (result.client_secret) {
+                console.log((0, colors_1.bold)('Client Secret: ') + result.client_secret);
+                console.log('');
+                console.log((0, colors_1.error)('⚠️  IMPORTANT: Save the client secret now - you won\'t be able to see it again!'));
+            }
+            console.log('');
+            console.log((0, colors_1.info)('Use these credentials in your backend service for machine-to-machine authentication.'));
+            console.log('');
+        }
+    }
+    catch (err) {
+        if (jsonOutput) {
+            console.log(JSON.stringify({ success: false, error: err.message }));
+        }
+        else {
+            console.log((0, colors_1.error)('✗ Failed to create M2M client: ' + err.message));
+        }
+        process.exit(1);
+    }
+}
+/**
+ * Get API Access Token details
+ */
+async function credentialsGetToken(tokenId, token, baseUrl, jsonOutput, debug = false, profile) {
+    try {
+        const client = await api_1.ApiClient.create(token, baseUrl, debug, profile);
+        const result = await client.get(`/v3/tokens/${tokenId}`);
+        if (jsonOutput) {
+            console.log(JSON.stringify(result));
+        }
+        else {
+            console.log((0, colors_1.bold)('\n=== API Access Token Details ===\n'));
+            console.log((0, colors_1.bold)('Token: ') + result.token);
+            console.log((0, colors_1.bold)('Created: ') + new Date(result.created_at).toLocaleString());
+            console.log((0, colors_1.bold)('Allowed APIs: ') + result.allowed_apis.join(', '));
+            if (result.grants && result.grants.length > 0) {
+                console.log((0, colors_1.bold)('\nGrants:'));
+                result.grants.forEach((grant) => {
+                    console.log(`  - ${grant.connection_name} → ${grant.source}`);
+                });
+            }
+            if (result.referers && result.referers.length > 0) {
+                console.log((0, colors_1.bold)('\nReferers:'));
+                result.referers.forEach((ref) => {
+                    console.log(`  - ${ref}`);
+                });
+            }
+            console.log('');
+        }
+    }
+    catch (err) {
+        if (jsonOutput) {
+            console.log(JSON.stringify({ success: false, error: err.message }));
+        }
+        else {
+            console.log((0, colors_1.error)('✗ Failed to get token: ' + err.message));
+        }
+        process.exit(1);
+    }
+}
+/**
+ * Get OAuth Client details (SPA or M2M)
+ */
+async function credentialsGetOAuth(clientId, clientType, token, baseUrl, jsonOutput, debug = false, profile) {
+    try {
+        const client = await api_1.ApiClient.create(token, baseUrl, debug, profile);
+        const result = await client.getAccounts(`/oauth-clients/${clientId}`);
+        if (jsonOutput) {
+            console.log(JSON.stringify(result));
+        }
+        else {
+            const type = result.app_type || clientType || 'Unknown';
+            console.log((0, colors_1.bold)(`\n=== ${type.toUpperCase()} OAuth Client Details ===\n`));
+            console.log((0, colors_1.bold)('Client ID: ') + result.client_id);
+            console.log((0, colors_1.bold)('Title: ') + result.title);
+            console.log((0, colors_1.bold)('Type: ') + type);
+            console.log((0, colors_1.bold)('Created: ') + new Date(result.createdAt).toLocaleString());
+            console.log((0, colors_1.bold)('Updated: ') + new Date(result.updatedAt).toLocaleString());
+            console.log('');
+        }
+    }
+    catch (err) {
+        if (jsonOutput) {
+            console.log(JSON.stringify({ success: false, error: err.message }));
+        }
+        else {
+            console.log((0, colors_1.error)('✗ Failed to get OAuth client: ' + err.message));
+        }
+        process.exit(1);
+    }
+}
+/**
+ * Update API Access Token
+ */
+async function credentialsUpdateToken(tokenId, options, token, baseUrl, jsonOutput, debug = false, profile) {
+    try {
+        const client = await api_1.ApiClient.create(token, baseUrl, debug, profile);
+        // Build update body
+        let body;
+        if (options.jsonBody) {
+            body = JSON.parse(options.jsonBody);
+        }
+        else {
+            // Get current token to preserve existing values
+            const current = await client.get(`/v3/tokens/${tokenId}`);
+            body = {
+                grants: current.grants || [],
+                allowed_apis: current.allowed_apis || [],
+                referers: current.referers || []
+            };
+            // Update grants
+            if (options.addGrant) {
+                const [connection, source] = options.addGrant.split(',');
+                body.grants.push({ connection_name: connection, source: source || '*' });
+            }
+            // Update APIs
+            if (options.addApi) {
+                body.allowed_apis.push(options.addApi);
+            }
+            // Update referers
+            if (options.referers) {
+                body.referers = options.referers.split(',').map((r) => r.trim());
+            }
+        }
+        const result = await client.patch(`/v3/tokens/${tokenId}`, body);
+        if (jsonOutput) {
+            console.log(JSON.stringify(result));
+        }
+        else {
+            console.log((0, colors_1.success)('\n✓ API Access Token updated successfully\n'));
+            console.log((0, colors_1.bold)('Token: ') + result.token);
+            console.log((0, colors_1.bold)('Allowed APIs: ') + result.allowed_apis.join(', '));
+            console.log('');
+        }
+    }
+    catch (err) {
+        if (jsonOutput) {
+            console.log(JSON.stringify({ success: false, error: err.message }));
+        }
+        else {
+            console.log((0, colors_1.error)('✗ Failed to update token: ' + err.message));
+        }
+        process.exit(1);
+    }
+}
+/**
+ * Update OAuth Client (SPA or M2M)
+ */
+async function credentialsUpdateOAuth(clientId, options, token, baseUrl, jsonOutput, debug = false, profile) {
+    try {
+        const client = await api_1.ApiClient.create(token, baseUrl, debug, profile);
+        // Get current client to determine type
+        const current = await client.getAccounts(`/oauth-clients/${clientId}`);
+        // Build update body
+        let body;
+        if (options.jsonBody) {
+            body = JSON.parse(options.jsonBody);
+        }
+        else {
+            body = {
+                title: options.title || current.title,
+                type: current.app_type
+            };
+            // For SPA clients, can update URLs
+            if (current.app_type === 'spa') {
+                if (options.loginUri)
+                    body.initiate_login_uri = options.loginUri;
+                if (options.callback)
+                    body.callbacks = options.callback;
+                if (options.logoutUrl)
+                    body.allowed_logout_urls = options.logoutUrl;
+                if (options.webOrigin)
+                    body.web_origins = options.webOrigin;
+                if (options.allowedOrigin)
+                    body.allowed_origins = options.allowedOrigin;
+            }
+        }
+        await client.putAccounts(`/oauth-clients/${clientId}`, body);
+        if (jsonOutput) {
+            console.log(JSON.stringify({ success: true, clientId }));
+        }
+        else {
+            console.log((0, colors_1.success)('\n✓ OAuth Client updated successfully\n'));
+        }
+    }
+    catch (err) {
+        if (jsonOutput) {
+            console.log(JSON.stringify({ success: false, error: err.message }));
+        }
+        else {
+            console.log((0, colors_1.error)('✗ Failed to update OAuth client: ' + err.message));
+        }
+        process.exit(1);
+    }
+}
+/**
+ * Delete API Access Token
+ */
+async function credentialsDeleteToken(tokenId, token, baseUrl, jsonOutput, debug = false, profile, yes) {
+    try {
+        const client = await api_1.ApiClient.create(token, baseUrl, debug, profile);
+        // Skip confirmation if --yes or --json flag is set
+        const skipConfirmation = yes || jsonOutput;
+        if (!skipConfirmation) {
+            // Fetch token details to show in confirmation prompt
+            let tokenDetails;
+            try {
+                tokenDetails = await client.get(`/v3/tokens/${tokenId}`);
+            }
+            catch (err) {
+                // If we can't fetch details, proceed with generic message
+                console.log((0, colors_1.warning)('\n⚠️  Warning: This will permanently delete this API Access Token.'));
+                console.log((0, colors_1.warning)(`   Token ID: ${tokenId}`));
+            }
+            if (tokenDetails) {
+                console.log((0, colors_1.warning)('\n⚠️  Warning: This will permanently delete:'));
+                console.log(`   API Access Token: ${tokenDetails.token.substring(0, 20)}...`);
+                console.log(`   Allowed APIs: ${tokenDetails.allowed_apis.join(', ')}`);
+                if (tokenDetails.grants && tokenDetails.grants.length > 0) {
+                    console.log(`   Grants: ${tokenDetails.grants.length} grant(s)`);
+                }
+            }
+            console.log('');
+            const confirmed = await (0, prompt_1.promptForConfirmation)("Type 'delete' to confirm: ", 'delete');
+            if (!confirmed) {
+                console.log('\nDeletion cancelled');
+                process.exit(0);
+            }
+            console.log('');
+        }
+        await client.delete(`/v3/tokens/${tokenId}`);
+        if (jsonOutput) {
+            console.log(JSON.stringify({ success: true, message: 'Token deleted successfully' }));
+        }
+        else {
+            console.log((0, colors_1.success)('✓ API Access Token deleted successfully'));
+        }
+    }
+    catch (err) {
+        if (jsonOutput) {
+            console.log(JSON.stringify({ success: false, error: err.message }));
+        }
+        else {
+            console.log((0, colors_1.error)('✗ Failed to delete token: ' + err.message));
+        }
+        process.exit(1);
+    }
+}
+/**
+ * Delete OAuth Client (SPA or M2M)
+ */
+async function credentialsDeleteOAuth(clientId, token, baseUrl, jsonOutput, debug = false, profile, yes) {
+    try {
+        const client = await api_1.ApiClient.create(token, baseUrl, debug, profile);
+        // Skip confirmation if --yes or --json flag is set
+        const skipConfirmation = yes || jsonOutput;
+        if (!skipConfirmation) {
+            // Fetch OAuth client details to show in confirmation prompt
+            let clientDetails;
+            try {
+                clientDetails = await client.getAccounts(`/oauth-clients/${clientId}`);
+            }
+            catch (err) {
+                // If we can't fetch details, proceed with generic message
+                console.log((0, colors_1.warning)('\n⚠️  Warning: This will permanently delete this OAuth Client.'));
+                console.log((0, colors_1.warning)(`   Client ID: ${clientId}`));
+            }
+            if (clientDetails) {
+                const clientType = clientDetails.app_type || 'Unknown';
+                console.log((0, colors_1.warning)('\n⚠️  Warning: This will permanently delete:'));
+                console.log(`   OAuth Client: "${clientDetails.title}"`);
+                console.log(`   Type: ${clientType.toUpperCase()}`);
+                console.log(`   Client ID: ${clientDetails.client_id}`);
+            }
+            console.log('');
+            const confirmed = await (0, prompt_1.promptForConfirmation)("Type 'delete' to confirm: ", 'delete');
+            if (!confirmed) {
+                console.log('\nDeletion cancelled');
+                process.exit(0);
+            }
+            console.log('');
+        }
+        await client.deleteAccounts(`/oauth-clients/${clientId}`);
+        if (jsonOutput) {
+            console.log(JSON.stringify({ success: true, message: 'OAuth Client deleted successfully' }));
+        }
+        else {
+            console.log((0, colors_1.success)('✓ OAuth Client deleted successfully'));
+        }
+    }
+    catch (err) {
+        if (jsonOutput) {
+            console.log(JSON.stringify({ success: false, error: err.message }));
+        }
+        else {
+            console.log((0, colors_1.error)('✗ Failed to delete OAuth client: ' + err.message));
+        }
+        process.exit(1);
+    }
+}