chore: aligned command with tailscale login flow

Author: aryanjassal

src/auth/CommandLogin.ts

@@ -1,10 +1,4 @@
 import type PolykeyClient from 'polykey/PolykeyClient.js';
-import type {
-  TokenPayloadEncoded,
-  TokenProtectedHeaderEncoded,
-  TokenSignatureEncoded,
-} from 'polykey/tokens/types.js';
-import type { IdentityRequestData } from 'polykey/client/types.js';
 import CommandPolykey from '../CommandPolykey.js';
 import * as binProcessors from '../utils/processors.js';
 import * as binParsers from '../utils/parsers.js';
@@ -17,19 +11,15 @@ class CommandLogin extends CommandPolykey {
     super(...args);
     this.name('login');
     this.description('Login to a platform with Polykey identity');
-    this.argument(
-      '<token>',
-      'Token provided by platform for logging in',
-      binParsers.parseCompactJWT,
-    );
+    this.argument('<url>', 'The URL to login using Polykey');
     this.addOption(binOptions.nodeId);
     this.addOption(binOptions.clientHost);
     this.addOption(binOptions.clientPort);
-    this.action(async (encodedToken, options) => {
+    this.addOption(binOptions.returnURLPath);
+    this.action(async (url: string, options) => {
       const { default: PolykeyClient } = await import(
         'polykey/PolykeyClient.js'
       );
-      const tokensUtils = await import('polykey/tokens/utils.js');
       const clientOptions = await binProcessors.processClientOptions(
         options.nodePath,
         options.nodeId,
@@ -58,52 +48,22 @@ class CommandLogin extends CommandPolykey {
           logger: this.logger.getChild(PolykeyClient.name),
         });
 
-        // Create a JSON representation of the encoded header
-        const [protectedHeader, payload, signature] = encodedToken;
-        const incomingTokenEncoded = {
-          payload: payload as TokenPayloadEncoded,
-          signatures: [
-            {
-              protected: protectedHeader as TokenProtectedHeaderEncoded,
-              signature: signature as TokenSignatureEncoded,
-            },
-          ],
-        };
-
-        // Get it verified and signed by the agent
+        // Get a signed token by the agent
         const response = await binUtils.retryAuthentication(
           (auth) =>
-            pkClient.rpcClient.methods.authSignToken({
-              metadata: auth,
-              ...incomingTokenEncoded,
-            }),
+            pkClient.rpcClient.methods.authSignToken({ metadata: auth }),
           meta,
         );
 
         // Send the returned JWT to the returnURL provided by the initial token
         const compactHeader = binUtils.jsonToCompactJWT(response);
-        const incomingPayload =
-          tokensUtils.parseTokenPayload<IdentityRequestData>(payload);
-        let result: Response;
-        try {
-          result = await fetch(incomingPayload.returnURL, {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/json' },
-            body: JSON.stringify({ token: compactHeader }),
-          });
-        } catch (e) {
-          throw new errors.ErrorPolykeyCLILoginFailed(
-            'Failed to send token to return url',
-            { cause: e },
-          );
-        }
+        const targetURL = new URL(url.endsWith('/') ? url.slice(0, url.length) : url);
+        const subPath: string = options.returnURLPath ?? '/api/oauth2/oidc'
+        targetURL.pathname = subPath.startsWith('/') ? subPath : `/${subPath}`;
+        targetURL.searchParams.append('token', compactHeader);
 
-        // Handle non-200 response
-        if (!result.ok) {
-          throw new errors.ErrorPolykeyCLILoginFailed(
-            `Return url returned failure with code ${result.status}`,
-          );
-        }
+        // TEMPORARY: Print out the resulting URL
+        process.stdout.write(`Open the following URL in your browser:\n\t${targetURL}`)
       } finally {
         if (pkClient! != null) await pkClient.stop();
       }

src/utils/options.ts

@@ -320,6 +320,11 @@ const preserveNewline = new Option(
   })
   .default([]);
 
+const returnURLPath = new Option(
+  '--url-path <path>',
+  'Which path on the website to send the token to',
+);
+
 export {
   nodePath,
   format,
@@ -365,4 +370,5 @@ export {
   recursive,
   parents,
   preserveNewline,
+  returnURLPath,
 };