ot-gcc-get-token 0.1.0__tar.gz

ot_gcc_get_token-0.1.0/PKG-INFO

@@ -0,0 +1,36 @@
+Metadata-Version: 2.4
+Name: ot-gcc-get-token
+Version: 0.1.0
+Summary: Launch Chrome/Edge, wait for OIDC login to the AWS Agentic Wizard, and print the access token to stdout.
+Classifier: Programming Language :: Python :: 3
+Classifier: Operating System :: OS Independent
+Requires-Python: >=3.8
+Description-Content-Type: text/markdown
+Requires-Dist: playwright>=1.40
+
+# ot-gcc-get-token
+
+Opens Chrome or Edge with a dedicated profile, waits for you to sign in to the
+AWS Agentic Wizard (OIDC), then prints the access token to **stdout**. All
+status messages go to stderr, so it is safe to use in scripts.
+
+## Install
+
+```
+pip install ot-gcc-get-token
+```
+
+## Usage
+
+```
+ot-gcc-get-token
+ot-gcc-get-token --wizard-url https://your-wizard.example.net/
+TOKEN=$(ot-gcc-get-token)
+```
+
+The wizard URL can also be set with the `WIZARD_URL` environment variable.
+The browser profile is stored in `~/.aws-agentic-wizard`, so you stay signed
+in between runs.
+
+Playwright is only used to attach to the browser over CDP (port 9222); no
+Playwright browser download is required.

ot_gcc_get_token-0.1.0/README.md

@@ -0,0 +1,26 @@
+# ot-gcc-get-token
+
+Opens Chrome or Edge with a dedicated profile, waits for you to sign in to the
+AWS Agentic Wizard (OIDC), then prints the access token to **stdout**. All
+status messages go to stderr, so it is safe to use in scripts.
+
+## Install
+
+```
+pip install ot-gcc-get-token
+```
+
+## Usage
+
+```
+ot-gcc-get-token
+ot-gcc-get-token --wizard-url https://your-wizard.example.net/
+TOKEN=$(ot-gcc-get-token)
+```
+
+The wizard URL can also be set with the `WIZARD_URL` environment variable.
+The browser profile is stored in `~/.aws-agentic-wizard`, so you stay signed
+in between runs.
+
+Playwright is only used to attach to the browser over CDP (port 9222); no
+Playwright browser download is required.

ot_gcc_get_token-0.1.0/pyproject.toml

@@ -0,0 +1,21 @@
+[build-system]
+requires = ["setuptools>=68", "wheel"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "ot-gcc-get-token"
+version = "0.1.0"
+description = "Launch Chrome/Edge, wait for OIDC login to the AWS Agentic Wizard, and print the access token to stdout."
+readme = "README.md"
+requires-python = ">=3.8"
+dependencies = ["playwright>=1.40"]
+classifiers = [
+    "Programming Language :: Python :: 3",
+    "Operating System :: OS Independent",
+]
+
+[project.scripts]
+ot-gcc-get-token = "ot_gcc_get_token.cli:main"
+
+[tool.setuptools.packages.find]
+where = ["src"]

ot_gcc_get_token-0.1.0/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+

ot_gcc_get_token-0.1.0/src/ot_gcc_get_token/__init__.py

@@ -0,0 +1 @@
+__version__ = "0.1.0"

ot_gcc_get_token-0.1.0/src/ot_gcc_get_token/__main__.py

@@ -0,0 +1,3 @@
+from .cli import main
+
+main()

ot_gcc_get_token-0.1.0/src/ot_gcc_get_token/cli.py

@@ -0,0 +1,239 @@
+import argparse
+import base64
+import json
+import os
+import pathlib
+import shutil
+import subprocess
+import sys
+import time
+import urllib.request
+
+from playwright.sync_api import sync_playwright
+
+
+DEFAULT_URL = "https://aws-agentic-wizard-gcc-dev.otxlab.net/"
+
+CDP_PORT = 9222
+
+PROFILE = pathlib.Path.home() / ".aws-agentic-wizard"
+
+
+def log(message):
+    print(message, file=sys.stderr)
+
+
+def find_browser():
+    candidates = [
+        os.path.expandvars(r"%ProgramFiles%\Google\Chrome\Application\chrome.exe"),
+        os.path.expandvars(r"%ProgramFiles(x86)%\Google\Chrome\Application\chrome.exe"),
+        os.path.expandvars(r"%LocalAppData%\Google\Chrome\Application\chrome.exe"),
+        os.path.expandvars(r"%ProgramFiles(x86)%\Microsoft\Edge\Application\msedge.exe"),
+        os.path.expandvars(r"%ProgramFiles%\Microsoft\Edge\Application\msedge.exe"),
+        os.path.expandvars(r"%LocalAppData%\Microsoft\Edge\Application\msedge.exe"),
+    ]
+
+    for path in candidates:
+        if os.path.isfile(path):
+            return path
+
+    for command in ("chrome", "msedge"):
+        path = shutil.which(command)
+        if path:
+            return path
+
+    return None
+
+
+def start_browser(url):
+    browser = find_browser()
+
+    if not browser:
+        raise RuntimeError("Chrome or Microsoft Edge was not found.")
+
+    PROFILE.mkdir(parents=True, exist_ok=True)
+
+    command = [
+        browser,
+        f"--remote-debugging-port={CDP_PORT}",
+        f"--user-data-dir={PROFILE}",
+        "--no-first-run",
+        "--no-default-browser-check",
+        url,
+    ]
+
+    log("Starting browser...")
+
+    subprocess.Popen(
+        command,
+        stdout=subprocess.DEVNULL,
+        stderr=subprocess.DEVNULL,
+    )
+
+
+def wait_for_cdp(timeout=30):
+    deadline = time.time() + timeout
+
+    while time.time() < deadline:
+        try:
+            with urllib.request.urlopen(
+                f"http://127.0.0.1:{CDP_PORT}/json/version",
+                timeout=1,
+            ) as response:
+                return json.load(response)
+        except Exception:
+            time.sleep(0.5)
+
+    raise RuntimeError(
+        "Browser started but CDP endpoint did not become available."
+    )
+
+
+GET_TOKEN_JS = """
+() => {
+    const key = Object.keys(sessionStorage)
+        .find(k => k.startsWith("oidc.user"));
+
+    if (!key) {
+        return null;
+    }
+
+    const raw = sessionStorage.getItem(key);
+
+    if (!raw) {
+        return null;
+    }
+
+    try {
+        const data = JSON.parse(raw);
+        return data.access_token || null;
+    } catch (e) {
+        return null;
+    }
+}
+"""
+
+
+def find_wizard_page(browser, url):
+    base = url.rstrip("/")
+
+    for context in browser.contexts:
+        for page in context.pages:
+            try:
+                if page.url.startswith(base):
+                    return page
+            except Exception:
+                pass
+
+    return None
+
+
+def decode_jwt(token):
+    parts = token.split(".")
+
+    if len(parts) != 3:
+        return None
+
+    payload = parts[1]
+    payload += "=" * (-len(payload) % 4)
+
+    try:
+        return json.loads(base64.urlsafe_b64decode(payload))
+    except Exception:
+        return None
+
+
+def run():
+    parser = argparse.ArgumentParser(
+        prog="ot-gcc-get-token",
+        description=(
+            "Open Chrome/Edge, wait for OIDC login to the AWS Agentic "
+            "Wizard, and print the access token to stdout."
+        ),
+    )
+
+    parser.add_argument(
+        "--wizard-url",
+        default=os.environ.get("WIZARD_URL", DEFAULT_URL),
+    )
+
+    parser.add_argument(
+        "--refresh",
+        action="store_true",
+        help="Open/re-authenticate instead of relying on current session",
+    )
+
+    args = parser.parse_args()
+
+    url = args.wizard_url
+
+    with sync_playwright() as pw:
+        # Start our own browser.
+        start_browser(url)
+
+        # Wait until Chrome exposes CDP.
+        info = wait_for_cdp()
+
+        log(f"Connected to: {info.get('Browser', 'browser')}")
+
+        # Attach Playwright.
+        browser = pw.chromium.connect_over_cdp(f"http://127.0.0.1:{CDP_PORT}")
+
+        # Find existing wizard tab.
+        page = find_wizard_page(browser, url)
+
+        # If it isn't open, create a tab.
+        if page is None:
+            log("Opening wizard...")
+            context = browser.contexts[0]
+            page = context.new_page()
+            page.goto(url, wait_until="domcontentloaded")
+
+        page.bring_to_front()
+
+        log("Waiting for authentication...")
+
+        # Wait until OIDC session appears.
+        page.wait_for_function(
+            """
+            () => Object.keys(sessionStorage)
+                .some(k => k.startsWith("oidc.user"))
+            """,
+            timeout=300000,
+        )
+
+        log("Authenticated session detected.")
+
+        token = page.evaluate(GET_TOKEN_JS)
+
+        if not token:
+            raise RuntimeError(
+                "OIDC session was found, but access_token was not found."
+            )
+
+        claims = decode_jwt(token)
+
+        if claims:
+            if "exp" in claims:
+                remaining = int(claims["exp"] - time.time())
+                log(f"Token expires in {remaining // 60} minutes.")
+
+            if "tenant_id" in claims:
+                log(f"tenant_id: {claims['tenant_id']}")
+
+        # ONLY token goes to stdout.
+        print(token)
+
+
+def main():
+    try:
+        run()
+    except KeyboardInterrupt:
+        sys.exit(130)
+    except Exception as exc:
+        print(f"ERROR: {exc}", file=sys.stderr)
+        sys.exit(1)
+
+
+if __name__ == "__main__":
+    main()

ot_gcc_get_token-0.1.0/src/ot_gcc_get_token.egg-info/PKG-INFO

@@ -0,0 +1,36 @@
+Metadata-Version: 2.4
+Name: ot-gcc-get-token
+Version: 0.1.0
+Summary: Launch Chrome/Edge, wait for OIDC login to the AWS Agentic Wizard, and print the access token to stdout.
+Classifier: Programming Language :: Python :: 3
+Classifier: Operating System :: OS Independent
+Requires-Python: >=3.8
+Description-Content-Type: text/markdown
+Requires-Dist: playwright>=1.40
+
+# ot-gcc-get-token
+
+Opens Chrome or Edge with a dedicated profile, waits for you to sign in to the
+AWS Agentic Wizard (OIDC), then prints the access token to **stdout**. All
+status messages go to stderr, so it is safe to use in scripts.
+
+## Install
+
+```
+pip install ot-gcc-get-token
+```
+
+## Usage
+
+```
+ot-gcc-get-token
+ot-gcc-get-token --wizard-url https://your-wizard.example.net/
+TOKEN=$(ot-gcc-get-token)
+```
+
+The wizard URL can also be set with the `WIZARD_URL` environment variable.
+The browser profile is stored in `~/.aws-agentic-wizard`, so you stay signed
+in between runs.
+
+Playwright is only used to attach to the browser over CDP (port 9222); no
+Playwright browser download is required.

ot_gcc_get_token-0.1.0/src/ot_gcc_get_token.egg-info/SOURCES.txt

@@ -0,0 +1,12 @@
+README.md
+pyproject.toml
+setup.cfg
+src/ot_gcc_get_token/__init__.py
+src/ot_gcc_get_token/__main__.py
+src/ot_gcc_get_token/cli.py
+src/ot_gcc_get_token.egg-info/PKG-INFO
+src/ot_gcc_get_token.egg-info/SOURCES.txt
+src/ot_gcc_get_token.egg-info/dependency_links.txt
+src/ot_gcc_get_token.egg-info/entry_points.txt
+src/ot_gcc_get_token.egg-info/requires.txt
+src/ot_gcc_get_token.egg-info/top_level.txt

ot_gcc_get_token-0.1.0/src/ot_gcc_get_token.egg-info/dependency_links.txt

@@ -0,0 +1 @@
+

ot_gcc_get_token-0.1.0/src/ot_gcc_get_token.egg-info/entry_points.txt

@@ -0,0 +1,2 @@
+[console_scripts]
+ot-gcc-get-token = ot_gcc_get_token.cli:main

ot_gcc_get_token-0.1.0/src/ot_gcc_get_token.egg-info/requires.txt

@@ -0,0 +1 @@
+playwright>=1.40

ot_gcc_get_token-0.1.0/src/ot_gcc_get_token.egg-info/top_level.txt

@@ -0,0 +1 @@
+ot_gcc_get_token