feat: step 3 - obtain router token

comatory · comatory · commit da5df27a982f · 2026-04-09T09:28:03.000+02:00
diff --git a/cli/src/commands/demo/command.ts b/cli/src/commands/demo/command.ts
@@ -3,6 +3,7 @@ import ora from 'ora';
 import { program } from 'commander';
 import type { FederatedGraph, Subgraph, WhoAmIResponse } from '@wundergraph/cosmo-connect/dist/platform/v1/platform_pb';
 import { config } from '../../core/config.js';
+import { createRouterToken, deleteRouterToken } from '../../core/router-token.js';
 import { BaseCommandOptions } from '../../core/types/types.js';
 import { waitForKeyPress, rainbow } from '../../utils.js';
 import type { UserInfo } from './types.js';
@@ -230,6 +231,42 @@ async function handleStep2(
   }
 }
 
+async function handleStep3(opts: BaseCommandOptions, { userInfo }: { userInfo: UserInfo }) {
+  function retryFn() {
+    resetScreen(userInfo);
+    return handleStep3(opts, { userInfo });
+  }
+
+  const tokenParams = {
+    client: opts.client,
+    tokenName: config.demoRouterTokenName,
+    graphName: config.demoGraphName,
+    namespace: config.demoNamespace,
+  };
+
+  // Delete existing token first (idempotent — no error if missing)
+  const deleteResult = await deleteRouterToken(tokenParams);
+  if (deleteResult.error) {
+    console.error(`Failed to clean up existing router token: ${deleteResult.error.message}`);
+    await waitForKeyPress({ r: retryFn, R: retryFn }, 'Hit [r] to retry. CTRL+C to quit.');
+    return;
+  }
+
+  const spinner = ora().start('Generating router token…');
+  const createResult = await createRouterToken(tokenParams);
+
+  if (createResult.error) {
+    spinner.fail(`Failed to generate router token: ${createResult.error.message}`);
+    await waitForKeyPress({ r: retryFn, R: retryFn }, 'Hit [r] to retry. CTRL+C to quit.');
+    return;
+  }
+
+  spinner.succeed('Router token generated.');
+  console.log(`\n${pc.bold(createResult.token)}\n`);
+
+  // TODO: Step 3b — run router Docker container
+}
+
 async function handleGetOnboardingResponse(client: BaseCommandOptions['client'], userInfo: UserInfo) {
   const onboardingCheck = await checkExistingOnboarding(client);
 
@@ -310,6 +347,8 @@ export default function (opts: BaseCommandOptions) {
       }
 
       await handleStep2(opts, { onboarding: onboardingCheck, userInfo, supportDir, signal: controller.signal });
+
+      await handleStep3(opts, { userInfo });
     } finally {
       process.off('SIGINT', cleanup);
       process.off('SIGTERM', cleanup);
diff --git a/cli/src/commands/router/commands/token/commands/create.ts b/cli/src/commands/router/commands/token/commands/create.ts
@@ -1,8 +1,7 @@
 import { Command } from 'commander';
 import pc from 'picocolors';
-import { EnumStatusCode } from '@wundergraph/cosmo-connect/dist/common/common_pb';
 import { BaseCommandOptions } from '../../../../../core/types/types.js';
-import { getBaseHeaders } from '../../../../../core/config.js';
+import { createRouterToken } from '../../../../../core/router-token.js';
 
 export default (opts: BaseCommandOptions) => {
   const command = new Command('create');
@@ -20,39 +19,34 @@ export default (opts: BaseCommandOptions) => {
     'Prints the token in raw format. This is useful if you want to pipe the token into another command.',
   );
   command.action(async (name, options) => {
-    const resp = await opts.client.platform.createFederatedGraphToken(
-      {
-        tokenName: name,
-        graphName: options.graphName,
-        namespace: options.namespace,
-      },
-      {
-        headers: getBaseHeaders(),
-      },
-    );
+    const result = await createRouterToken({
+      client: opts.client,
+      tokenName: name,
+      graphName: options.graphName,
+      namespace: options.namespace,
+    });
 
-    if (resp.response?.code === EnumStatusCode.OK) {
-      if (options.raw) {
-        console.log(resp.token);
-        return;
-      }
-
-      console.log(`${pc.green(`Successfully created token ${pc.bold(name)} for graph ${pc.bold(options.graphName)}`)}`);
-      console.log('');
-      console.log(`${pc.bold(resp.token)}\n`);
-      console.log(pc.yellow('---'));
-      console.log(pc.yellow(`Please store the token in a secure place. It will not be shown again.`));
-      console.log(pc.yellow(`You can use the token only to authenticate against the Cosmo Platform from the routers.`));
-      console.log(pc.yellow('---'));
-    } else {
+    if (result.error) {
       console.log(`${pc.red('Could not create token for graph')}`);
-      if (resp.response?.details) {
-        console.log(pc.red(pc.bold(resp.response?.details)));
+      if (result.error.message) {
+        console.log(pc.red(pc.bold(result.error.message)));
       }
       process.exitCode = 1;
-      // eslint-disable-next-line no-useless-return
       return;
     }
+
+    if (options.raw) {
+      console.log(result.token);
+      return;
+    }
+
+    console.log(`${pc.green(`Successfully created token ${pc.bold(name)} for graph ${pc.bold(options.graphName)}`)}`);
+    console.log('');
+    console.log(`${pc.bold(result.token)}\n`);
+    console.log(pc.yellow('---'));
+    console.log(pc.yellow(`Please store the token in a secure place. It will not be shown again.`));
+    console.log(pc.yellow(`You can use the token only to authenticate against the Cosmo Platform from the routers.`));
+    console.log(pc.yellow('---'));
   });
 
   return command;
diff --git a/cli/src/commands/router/commands/token/commands/delete.ts b/cli/src/commands/router/commands/token/commands/delete.ts
@@ -1,9 +1,8 @@
 import { Command } from 'commander';
 import pc from 'picocolors';
-import { EnumStatusCode } from '@wundergraph/cosmo-connect/dist/common/common_pb';
 import inquirer from 'inquirer';
 import { BaseCommandOptions } from '../../../../../core/types/types.js';
-import { getBaseHeaders } from '../../../../../core/config.js';
+import { deleteRouterToken } from '../../../../../core/router-token.js';
 
 export default (opts: BaseCommandOptions) => {
   const command = new Command('delete');
@@ -27,28 +26,24 @@ export default (opts: BaseCommandOptions) => {
         return;
       }
     }
-    const resp = await opts.client.platform.deleteRouterToken(
-      {
-        tokenName: name,
-        fedGraphName: options.graphName,
-        namespace: options.namespace,
-      },
-      {
-        headers: getBaseHeaders(),
-      },
-    );
 
-    if (resp.response?.code === EnumStatusCode.OK) {
-      console.log(pc.dim(pc.green(`A router token called '${name}' was deleted.`)));
-    } else {
+    const result = await deleteRouterToken({
+      client: opts.client,
+      tokenName: name,
+      graphName: options.graphName,
+      namespace: options.namespace,
+    });
+
+    if (result.error) {
       console.log(`Failed to delete router token ${pc.bold(name)}.`);
-      if (resp.response?.details) {
-        console.log(pc.red(pc.bold(resp.response?.details)));
+      if (result.error.message) {
+        console.log(pc.red(pc.bold(result.error.message)));
       }
       process.exitCode = 1;
-      // eslint-disable-next-line no-useless-return
       return;
     }
+
+    console.log(pc.dim(pc.green(`A router token called '${name}' was deleted.`)));
   });
 
   return command;
diff --git a/cli/src/core/config.ts b/cli/src/core/config.ts
@@ -44,6 +44,7 @@ export const config = {
   dockerBuilderName: 'cosmo-builder' as const,
   demoRouterPort: 3002 as const,
   demoPluginNames: ['products', 'reviews'] as const,
+  demoRouterTokenName: 'demo-router-token' as const,
 };
 
 export const getBaseHeaders = (): HeadersInit => {
diff --git a/cli/src/core/router-token.ts b/cli/src/core/router-token.ts
@@ -0,0 +1,81 @@
+import { EnumStatusCode } from '@wundergraph/cosmo-connect/dist/common/common_pb';
+import { getBaseHeaders } from './config.js';
+import type { BaseCommandOptions } from './types/types.js';
+
+export interface CreateRouterTokenParams {
+  client: BaseCommandOptions['client'];
+  tokenName: string;
+  graphName: string;
+  namespace?: string;
+}
+
+export interface CreateRouterTokenResult {
+  error: Error | null;
+  token?: string;
+}
+
+export interface DeleteRouterTokenParams {
+  client: BaseCommandOptions['client'];
+  tokenName: string;
+  graphName: string;
+  namespace?: string;
+}
+
+export interface DeleteRouterTokenResult {
+  error: Error | null;
+}
+
+/**
+ * Creates a router token for a federated graph.
+ * Never calls program.error() — caller decides how to handle errors.
+ */
+export async function createRouterToken(params: CreateRouterTokenParams): Promise<CreateRouterTokenResult> {
+  const { client, tokenName, graphName, namespace } = params;
+
+  const resp = await client.platform.createFederatedGraphToken(
+    {
+      tokenName,
+      graphName,
+      namespace,
+    },
+    {
+      headers: getBaseHeaders(),
+    },
+  );
+
+  if (resp.response?.code === EnumStatusCode.OK) {
+    return { error: null, token: resp.token };
+  }
+
+  return { error: new Error(resp.response?.details ?? 'Could not create router token') };
+}
+
+/**
+ * Deletes a router token. Idempotent — returns success if token doesn't exist.
+ * Never calls program.error() — caller decides how to handle errors.
+ */
+export async function deleteRouterToken(params: DeleteRouterTokenParams): Promise<DeleteRouterTokenResult> {
+  const { client, tokenName, graphName, namespace } = params;
+
+  const resp = await client.platform.deleteRouterToken(
+    {
+      tokenName,
+      fedGraphName: graphName,
+      namespace,
+    },
+    {
+      headers: getBaseHeaders(),
+    },
+  );
+
+  if (resp.response?.code === EnumStatusCode.OK) {
+    return { error: null };
+  }
+
+  // Treat "doesn't exist" as success (idempotent)
+  if (resp.response?.details?.includes("doesn't exist")) {
+    return { error: null };
+  }
+
+  return { error: new Error(resp.response?.details ?? 'Could not delete router token') };
+}
