orchard/internal/command/get/vm_access_token.go

59 lines
1.3 KiB
Go

package get
import (
"fmt"
"time"
"github.com/cirruslabs/orchard/internal/vmtempauth"
"github.com/cirruslabs/orchard/pkg/client"
"github.com/spf13/cobra"
)
var vmAccessTokenTTL time.Duration
func newGetVMAccessTokenCommand() *cobra.Command {
command := &cobra.Command{
Use: "vm-access-token VM_NAME",
Short: "Issue a temporary VM access token",
RunE: runGetVMAccessToken,
Args: cobra.ExactArgs(1),
}
command.Flags().DurationVar(&vmAccessTokenTTL, "ttl", vmtempauth.DefaultTTL,
fmt.Sprintf("token TTL (default: %s, max: %s)", vmtempauth.DefaultTTL, vmtempauth.MaxTTL))
return command
}
func runGetVMAccessToken(cmd *cobra.Command, args []string) error {
name := args[0]
if vmAccessTokenTTL <= 0 {
return fmt.Errorf("%w: --ttl must be greater than 0", ErrGetFailed)
}
if vmAccessTokenTTL > vmtempauth.MaxTTL {
return fmt.Errorf("%w: --ttl cannot exceed %s", ErrGetFailed, vmtempauth.MaxTTL)
}
ttlSeconds := uint64(vmAccessTokenTTL / time.Second)
if ttlSeconds == 0 {
return fmt.Errorf("%w: --ttl is too small", ErrGetFailed)
}
apiClient, err := client.New()
if err != nil {
return err
}
response, err := apiClient.VMs().IssueAccessToken(cmd.Context(), name, client.IssueAccessTokenOptions{
TTLSeconds: &ttlSeconds,
})
if err != nil {
return err
}
fmt.Println(response.Token)
return nil
}