Skip to content

auth_cmd

auth_cmd

CLI commands for API key management.

Functions:

auth 

auth() -> None

Manage API authentication keys.

Source code in src/diapason/cli/auth_cmd.py 
16
17
18
@click.group("auth")
def auth() -> None:
    """Manage API authentication keys."""

create_key 

create_key() -> None

Generate or rotate the owner-only local API key.

Source code in src/diapason/cli/auth_cmd.py 
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
@auth.command("create-key")
def create_key() -> None:
    """Generate or rotate the owner-only local API key."""
    key = generate_api_key()
    auth_dir = DEFAULT_CONFIG_DIR / "auth"
    auth_dir.mkdir(mode=0o700, parents=True, exist_ok=True)
    key_path = auth_dir / "local_api_key"
    flags = os.O_WRONLY | os.O_CREAT | os.O_TRUNC
    if hasattr(os, "O_NOFOLLOW"):
        flags |= os.O_NOFOLLOW
    descriptor = os.open(key_path, flags, 0o600)
    with os.fdopen(descriptor, "w", encoding="utf-8") as handle:
        handle.write(key + "\n")
    key_path.chmod(0o600)

    click.echo(f"API key generated: {key}")
    click.echo(f"Stored in: {key_path}")
    click.echo("File permissions set to 0600 (user-only read/write).")

generate_key 

generate_key() -> None

Print a new key for use in DIAPASON_API_KEY or service secrets.

Source code in src/diapason/cli/auth_cmd.py 
41
42
43
44
@auth.command("generate-key")
def generate_key() -> None:
    """Print a new key for use in DIAPASON_API_KEY or service secrets."""
    click.echo(generate_api_key())

revoke_key 

revoke_key() -> None

Revoke the current API key.

Source code in src/diapason/cli/auth_cmd.py 
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
@auth.command("revoke-key")
def revoke_key() -> None:
    """Revoke the current API key."""
    key_path = DEFAULT_CONFIG_DIR / "auth" / "local_api_key"
    if key_path.exists() and not key_path.is_symlink():
        key_path.unlink()
    config_path = DEFAULT_CONFIG_PATH
    if not config_path.exists():
        click.echo("Local API key revoked.")
        return

    content = config_path.read_text()
    if "api_key" not in content:
        click.echo("Local API key revoked.")
        return

    import re

    content = re.sub(r'api_key\s*=\s*"[^"]*"', 'api_key = ""', content)
    config_path.write_text(content)
    click.echo("API key revoked.")