ticktick-cli 1.0.2 → 1.0.3

package/README.md

@@ -100,6 +100,8 @@ Interactive login:
 ticktick auth login
 ```
 
+Successful auth stores the token in your local config file and masks secrets in the terminal output by default.
+
 If you already have an authorization code:
 
 ```bash
@@ -118,6 +120,8 @@ Check current auth state:
 ticktick auth status
 ```
 
+If you need the raw token values in the terminal, add `--show-secrets` to `auth login`, `auth exchange`, or `auth status`.
+
 Clear the stored access token:
 
 ```bash

package/dist/auth.js

@@ -118,7 +118,7 @@ export async function openBrowserWith(url, options = {}) {
     const stderr = options.stderr ?? ((text) => process.stderr.write(text));
     try {
         if (platform === "win32") {
-            await run("cmd", ["/c", "start", "", url]);
+            await run("rundll32", ["url.dll,FileProtocolHandler", url]);
             return;
         }
         if (platform === "darwin") {

package/dist/cli.js

@@ -83,6 +83,7 @@ function buildAuthCommands(root, dependencies) {
         .command("login")
         .description("Open the OAuth flow, exchange the code, and store the access token")
         .option("--timeout-ms <number>", "Timeout while waiting for the callback", parseInteger, 120000)
+        .option("--show-secrets", "Include access token and refresh token in the output")
         .action(async (...args) => {
         const command = args.at(-1);
         const options = command.optsWithGlobals();
@@ -97,24 +98,27 @@ function buildAuthCommands(root, dependencies) {
             });
             return;
         }
+        dependencies.stderr(`Waiting for OAuth callback on ${config.redirectUri}...\n`);
         const codePromise = dependencies.waitForOAuthCode(config.redirectUri, state, options.timeoutMs);
         await dependencies.openBrowser(url);
         const code = await codePromise;
         const token = await dependencies.exchangeAuthorizationCode(config, code);
         await persistConfig(config, token, dependencies);
-        dependencies.printJson(token);
+        dependencies.printJson(formatAuthSuccess(config, token, options.showSecrets, dependencies));
     });
     auth
         .command("exchange <code>")
         .description("Exchange an authorization code for an access token")
+        .option("--show-secrets", "Include access token and refresh token in the output")
         .action(async (...args) => {
         const command = args.at(-1);
         const [code] = args;
-        const config = await dependencies.resolveRuntimeConfig(runtimeOverrides(command.optsWithGlobals(), dependencies));
+        const options = command.optsWithGlobals();
+        const config = await dependencies.resolveRuntimeConfig(runtimeOverrides(options, dependencies));
         requireClientCredentials(config);
         const token = await dependencies.exchangeAuthorizationCode(config, code);
         await persistConfig(config, token, dependencies);
-        dependencies.printJson(token);
+        dependencies.printJson(formatAuthSuccess(config, token, options.showSecrets, dependencies));
     });
     auth
         .command("status")
@@ -509,6 +513,26 @@ async function persistConfig(runtime, token, dependencies) {
     };
     await dependencies.saveStoredConfig(runtime.configFile, next);
 }
+function formatAuthSuccess(runtime, token, showSecrets, dependencies) {
+    return {
+        ok: true,
+        message: "Authorization complete.",
+        service: runtime.service,
+        configFile: runtime.configFile,
+        redirectUri: runtime.redirectUri,
+        scope: token.scope ?? runtime.scopes,
+        tokenType: token.token_type,
+        expiresIn: token.expires_in,
+        accessToken: showSecrets
+            ? token.access_token
+            : dependencies.maskSecret(token.access_token),
+        refreshToken: token.refresh_token
+            ? showSecrets
+                ? token.refresh_token
+                : dependencies.maskSecret(token.refresh_token)
+            : undefined,
+    };
+}
 function requireClientCredentials(config) {
     if (!config.clientId || !config.clientSecret) {
         throw new Error("Client credentials are required. Set TICKTICK_CLIENT_ID and TICKTICK_CLIENT_SECRET or use `ticktick config set`.");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ticktick-cli",
-  "version": "1.0.2",
+  "version": "1.0.3",
   "description": "CLI wrapper for the TickTick Open API",
   "type": "module",
   "files": [