Class: Logi::Commands::App

Inherits:
Thor
  • Object
show all
Defined in:
lib/logi/commands/app.rb

Instance Method Summary collapse

Instance Method Details

#add_redirect(id, uri) ⇒ Object 



89
90
91
92
93
94
95
96
97
98
99
100
101
102
 
# File 'lib/logi/commands/app.rb', line 89

def add_redirect(id, uri)
  client = authed_client
  current = client.get("/api/v1/applications/#{id}")["redirect_uris"] || []
  if current.include?(uri)
    puts pastel.dim("Already registered: #{uri}")
    return
  end
  client.patch("/api/v1/applications/#{id}", body: {
    application: { redirect_uris: current + [ uri ] }
  })
  puts pastel.green("✓ Added: #{uri}")
rescue HttpClient::Error => e
  abort pastel.red("Couldn't add redirect: #{e.status} #{e.body}")
end

#create ⇒ Object 



49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
 
# File 'lib/logi/commands/app.rb', line 49

def create
  data = authed_client.post("/api/v1/applications", body: {
    application: {
      name: options[:name],
      redirect_uris: [ options[:redirect_uri] ],
      allowed_scopes: options[:scope],
      webhook_url: options[:webhook_url]
    }.compact
  })
  Output.success(data, options) do
    puts pastel.green("✓ App created")
    puts "  client_id:     #{data['client_id']}"
    puts "  client_secret: #{pastel.yellow(data['client_secret'])}"
    puts pastel.dim("  ⚠ The secret is only shown once. Store it somewhere safe.")
  end
rescue HttpClient::Error => e
  Output.failure(code: "create_failed", message: e.body.to_s, status: e.status, options: options) do
    abort pastel.red("Couldn't create app: #{e.status} #{e.body}")
  end
end

#delete(id) ⇒ Object 



81
82
83
84
85
86
 
# File 'lib/logi/commands/app.rb', line 81

def delete(id)
  authed_client.delete("/api/v1/applications/#{id}")
  puts pastel.green("✓ Deleted")
rescue HttpClient::Error => e
  abort pastel.red("Couldn't delete app: #{e.status} #{e.body}")
end

#list ⇒ Object 



10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
 
# File 'lib/logi/commands/app.rb', line 10

def list
  data = authed_client.get("/api/v1/applications")
  apps = data["applications"]

  Output.success({ count: apps.size, applications: apps }, options) do
    if apps.empty?
      puts pastel.dim("You don't have any apps yet.")
    else
      table = TTY::Table.new(
        header: [ "name", "client_id", "status", "redirect_uris" ],
        rows: apps.map { |a| [ a["name"], a["client_id"], a["status"], a["redirect_uris"].first ] }
      )
      puts table.render(:unicode, padding: [ 0, 1 ])
    end
  end
rescue HttpClient::Error => e
  Output.failure(code: "list_failed", message: e.body.to_s, status: e.status, options: options) do
    abort pastel.red("Couldn't list apps: #{e.status} #{e.body}")
  end
end

#remove_redirect(id, uri) ⇒ Object 



175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
 
# File 'lib/logi/commands/app.rb', line 175

def remove_redirect(id, uri)
  client = authed_client
  current = client.get("/api/v1/applications/#{id}")["redirect_uris"] || []
  unless current.include?(uri)
    puts pastel.dim("Not registered: #{uri}")
    return
  end
  if current.size <= 1
    abort pastel.red("At least one redirect_uri is required. Add another URI first.")
  end
  client.patch("/api/v1/applications/#{id}", body: {
    application: { redirect_uris: current - [ uri ] }
  })
  puts pastel.green("✓ Removed: #{uri}")
rescue HttpClient::Error => e
  abort pastel.red("Couldn't remove redirect: #{e.status} #{e.body}")
end

#rotate_secret(id) ⇒ Object 



71
72
73
74
75
76
77
78
 
# File 'lib/logi/commands/app.rb', line 71

def rotate_secret(id)
  data = authed_client.post("/api/v1/applications/#{id}/rotate_secret")
  puts pastel.green("✓ Secret rotated")
  puts "  client_secret: #{pastel.yellow(data['client_secret'])}"
  puts pastel.dim("  ⚠ The old secret has been revoked immediately.")
rescue HttpClient::Error => e
  abort pastel.red("Couldn't rotate secret: #{e.status} #{e.body}")
end

#show(id) ⇒ Object 



32
33
34
35
36
37
38
39
40
41
 
# File 'lib/logi/commands/app.rb', line 32

def show(id)
  data = authed_client.get("/api/v1/applications/#{id}")
  Output.success(data, options) do
    puts JSON.pretty_generate(data)
  end
rescue HttpClient::Error => e
  Output.failure(code: "show_failed", message: e.body.to_s, status: e.status, options: options) do
    abort pastel.red("Couldn't fetch app: #{e.status} #{e.body}")
  end
end

#verify(id) ⇒ Object 



107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
 
# File 'lib/logi/commands/app.rb', line 107

def verify(id)
  client = authed_client
  app = client.get("/api/v1/applications/#{id}")
  target_uri = options[:redirect_uri]

  if options[:json]
    result = build_verify_result(app, target_uri, client)
    puts JSON.pretty_generate(result)
    exit(result[:checks].all? { |c| c[:ok] } ? 0 : 1)
  end

  puts pastel.bold("logi verify ") + pastel.dim(id)
  puts ""

  # Check 1: app status
  if app["status"] == "approved"
    ok "App status: approved"
  else
    warn "App status: #{app['status']} (production traffic needs status=approved)"
  end

  # Check 2: tier
  tier = app["tier"]
  if tier == "production"
    ok "Tier: production"
  else
    warn "Tier: sandbox — only localhost / staging redirects are allowed. To use a production URL, request a tier upgrade."
  end

  # Check 3: redirect_uri registration
  registered = app["redirect_uris"] || []
  puts pastel.dim("  Registered redirect_uris:")
  registered.each { |u| puts pastel.dim("    - #{u}") }

  if target_uri
    if registered.include?(target_uri)
      ok "redirect_uri is registered: #{target_uri}"
    else
      err "redirect_uri is NOT registered: #{target_uri}"
      puts pastel.dim("       → logi apps add-redirect #{id} '#{target_uri}'")
    end

    # If the app is sandbox-tier but the target URL is on a prod domain, warn.
    if tier == "sandbox" && target_uri =~ %r{https?://(?!localhost|127\.0\.0\.1)([^/]+)}
      host = ::Regexp.last_match(1)
      unless host.match?(/\.staging\.|\.test\.|\.localhost$/)
        err "Sandbox tier but a prod domain (#{host}) — this will be blocked."
        puts pastel.dim("       → Request a tier upgrade, or use a staging domain.")
      end
    end
  end

  # Check 4: env vars cheatsheet
  puts ""
  puts pastel.bold("Recommended environment variables for the RP:")
  api_url = Config.load.api_url
  puts "  LOGI_API_URL=#{api_url}"
  puts "  LOGI_CLIENT_ID=#{app['client_id']}"
  puts "  LOGI_CLIENT_SECRET=" + pastel.dim("(issued via rotate-secret)")
  puts ""
  puts pastel.dim("Docs: https://docs.1pass.dev/guide/troubleshooting")
rescue HttpClient::Error => e
  Output.failure(code: "verify_failed", message: e.body.to_s, status: e.status, options: options) do
    abort pastel.red("Couldn't verify app: #{e.status} #{e.body}")
  end
end