mirror of
https://github.com/larksuite/cli.git
synced 2026-07-03 14:02:43 +08:00
465c789f7c
* feat: add --json flag support to auth subcommands * feat(auth/logout): add json output support for logout command * feat(auth/list): add json output support for auth list command
94 lines
2.6 KiB
Go
94 lines
2.6 KiB
Go
// Copyright (c) 2026 Lark Technologies Pte. Ltd.
|
|
// SPDX-License-Identifier: MIT
|
|
|
|
package auth
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
|
|
"github.com/spf13/cobra"
|
|
|
|
"github.com/larksuite/cli/errs"
|
|
"github.com/larksuite/cli/internal/cmdutil"
|
|
"github.com/larksuite/cli/internal/output"
|
|
)
|
|
|
|
// ScopesOptions holds all inputs for auth scopes.
|
|
type ScopesOptions struct {
|
|
Factory *cmdutil.Factory
|
|
Ctx context.Context
|
|
Format string
|
|
JSON bool
|
|
}
|
|
|
|
// NewCmdAuthScopes creates the auth scopes subcommand.
|
|
func NewCmdAuthScopes(f *cmdutil.Factory, runF func(*ScopesOptions) error) *cobra.Command {
|
|
opts := &ScopesOptions{Factory: f}
|
|
|
|
cmd := &cobra.Command{
|
|
Use: "scopes",
|
|
Short: "Query scopes enabled for the app",
|
|
RunE: func(cmd *cobra.Command, args []string) error {
|
|
opts.Ctx = cmd.Context()
|
|
if opts.JSON {
|
|
opts.Format = "json"
|
|
}
|
|
if runF != nil {
|
|
return runF(opts)
|
|
}
|
|
return authScopesRun(opts)
|
|
},
|
|
}
|
|
|
|
cmd.Flags().StringVar(&opts.Format, "format", "json", "output format: json (default) | pretty")
|
|
cmd.Flags().BoolVar(&opts.JSON, "json", false, "structured JSON output")
|
|
cmdutil.SetRisk(cmd, "read")
|
|
|
|
return cmd
|
|
}
|
|
|
|
func authScopesRun(opts *ScopesOptions) error {
|
|
f := opts.Factory
|
|
|
|
config, err := f.Config()
|
|
if err != nil {
|
|
return err
|
|
}
|
|
fmt.Fprintf(f.IOStreams.ErrOut, "Querying app scopes...\n\n")
|
|
appInfo, err := getAppInfoFn(opts.Ctx, f, config.AppID)
|
|
if err != nil {
|
|
// Discriminate by error type so transport / parse failures are not
|
|
// reclassified as PermissionError(MissingScope) — re-auth does not
|
|
// fix network / 5xx / JSON parse errors and misclassifying them
|
|
// here would mislead agents into re-auth loops.
|
|
// - typed errors pass through unchanged
|
|
// - bare errors become InternalError(SubtypeSDKError) with Cause
|
|
// preserved so callers (errors.Is) can still see the underlying
|
|
// transport/parse failure.
|
|
// Genuine permission failures are surfaced from appInfo *content*,
|
|
// not from this transport-level error path.
|
|
if errs.IsTyped(err) {
|
|
return err
|
|
}
|
|
return errs.NewInternalError(errs.SubtypeSDKError,
|
|
"failed to get app scope info: %v", err).WithCause(err)
|
|
}
|
|
if opts.Format == "pretty" {
|
|
fmt.Fprintf(f.IOStreams.ErrOut, "App ID: %s\n", config.AppID)
|
|
fmt.Fprintf(f.IOStreams.ErrOut, "Enabled scopes (%d):\n\n", len(appInfo.UserScopes))
|
|
for _, s := range appInfo.UserScopes {
|
|
fmt.Fprintf(f.IOStreams.ErrOut, " • %s\n", s)
|
|
}
|
|
} else {
|
|
output.PrintJson(f.IOStreams.Out, map[string]interface{}{
|
|
"appId": config.AppID,
|
|
"brand": config.Brand,
|
|
"tokenType": "user",
|
|
"userScopes": appInfo.UserScopes,
|
|
"count": len(appInfo.UserScopes),
|
|
})
|
|
}
|
|
return nil
|
|
}
|