convergent-cli 0.1.0__py3-none-any.whl

convergent_cli/commands/auth.py

@@ -0,0 +1,117 @@
+"""Hosted auth command registration for ``cv``."""
+
+from __future__ import annotations
+
+import argparse
+from typing import Any
+
+from convergent_cli import auth as hosted_auth
+from convergent_cli.command_tree import CommandCatalog, CommandInfo, Effect, Plane
+from convergent_cli.output import emit_json
+
+
+def register(subparsers: Any, catalog: CommandCatalog) -> None:
+    login = subparsers.add_parser(
+        "login",
+        help="Sign in to Convergent.",
+        description="Sign in to Convergent.",
+    )
+    login.add_argument(
+        "--profile",
+        default=argparse.SUPPRESS,
+        help="Profile to sign in. Defaults to the active profile.",
+    )
+    login.add_argument(
+        "--control-api-url",
+        help="Hosted control origin for a new profile or profile update.",
+    )
+    login.add_argument(
+        "--client-id",
+        help="Public OAuth client id. Overrides built-in hosted clients.",
+    )
+    login.add_argument(
+        "--headless",
+        action="store_true",
+        help=(
+            "Print the authorization URL and read the pasted redirect instead of opening a browser."
+        ),
+    )
+    catalog.bind(
+        parser=login,
+        handler=_login,
+        info=CommandInfo(
+            path=("login",),
+            description="Sign in to Convergent.",
+            plane=Plane.LOCAL,
+            requires_session=False,
+            effect=Effect.WRITE,
+        ),
+    )
+
+    whoami = subparsers.add_parser("whoami", help="Show the signed-in user and organization.")
+    whoami.add_argument(
+        "--profile",
+        default=argparse.SUPPRESS,
+        help="Profile to read. Defaults to the active profile.",
+    )
+    catalog.bind(
+        parser=whoami,
+        handler=_whoami,
+        info=CommandInfo(
+            path=("whoami",),
+            description="Show the signed-in user and organization.",
+            plane=Plane.CONTROL,
+            requires_session=True,
+            effect=Effect.READ,
+        ),
+    )
+
+    logout = subparsers.add_parser("logout", help="Remove the local session for a profile.")
+    logout.add_argument(
+        "--profile",
+        default=argparse.SUPPRESS,
+        help="Profile to sign out. Defaults to the active profile.",
+    )
+    catalog.bind(
+        parser=logout,
+        handler=_logout,
+        info=CommandInfo(
+            path=("logout",),
+            description="Remove the local session for a profile.",
+            plane=Plane.LOCAL,
+            requires_session=False,
+            effect=Effect.WRITE,
+        ),
+    )
+
+
+def _login(args: argparse.Namespace) -> int:
+    result = hosted_auth.login(
+        profile_name=args.profile,
+        control_api_url=args.control_api_url,
+        client_id=args.client_id,
+        headless=args.headless,
+    )
+    print(
+        f"Signed in as {result.identity['email']} ({result.identity['organization_id']}) "
+        f"at {result.origin}; stored the session for profile {result.profile_name!r} "
+        f"at {result.session_file}."
+    )
+    return 0
+
+
+def _logout(args: argparse.Namespace) -> int:
+    name, removed = hosted_auth.logout(profile_name=args.profile)
+    if removed:
+        print(f"Removed the local session for profile {name!r}.")
+    else:
+        print(f"No local session for profile {name!r}; already logged out.")
+    return 0
+
+
+def _whoami(args: argparse.Namespace) -> int:
+    emit_json(hosted_auth.whoami(profile_name=args.profile))
+    return 0
+
+
+__all__ = ["register"]