skills/modelstudioai__cli
1
0
Fork 0
mirror of https://github.com/modelstudioai/cli.git synced 2026-09-14 19:49:23 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix(auth): clear STS credentials on logout

Browse Source
This commit is contained in:
若麒
2026-07-16 10:02:00 +08:00
parent 64ff057fe5
commit 75a45e1a2a
5 changed files with 83 additions and 34 deletions
Download Patch File Download Diff File Expand all files Collapse all files
packages/commands/src/commands/auth/logout.ts
+9 -5
View File
@@ -12,7 +12,7 @@ export default defineCommand({
},
openApi: {
type: "switch",
description: "Only clear OpenAPI AK/SK credentials, keep other credentials intact",
description: "Only clear OpenAPI AK/SK/STS credentials, keep other credentials intact",
},
},
exampleArgs: ["", "--console", "--open-api", "--dry-run"],
@@ -46,13 +46,17 @@ export default defineCommand({
if (flags.openApi) {
if (settings.dryRun) {
if (stored.openapi)
emitBare(`Would clear access_key_id / access_key_secret from ${store.path}`);
emitBare(
`Would clear access_key_id / access_key_secret / security_token from ${store.path}`,
);
else emitBare("No OpenAPI AK/SK credentials to clear.");
emitBare("No changes made.");
return;
}
if (await store.logout("openapi")) {
process.stderr.write(`Cleared access_key_id / access_key_secret from ${store.path}\n`);
process.stderr.write(
`Cleared access_key_id / access_key_secret / security_token from ${store.path}\n`,
);
if (stored.apiKey || stored.console) {
process.stderr.write(
"Other credentials are still configured and will be used for authentication.\n",
@@ -69,7 +73,7 @@ export default defineCommand({
if (settings.dryRun) {
if (hasKey)
emitBare(
`Would clear api_key / access_token / access_key_id / access_key_secret from ${store.path}`,
`Would clear api_key / access_token / access_key_id / access_key_secret / security_token from ${store.path}`,
);
else emitBare("No credentials to clear.");
emitBare("No changes made.");
@@ -78,7 +82,7 @@ export default defineCommand({
if (await store.logout("all")) {
process.stderr.write(
`Cleared api_key / access_token / access_key_id / access_key_secret from ${store.path}\n`,
`Cleared api_key / access_token / access_key_id / access_key_secret / security_token from ${store.path}\n`,
);
} else {
process.stderr.write("No credentials to clear.\n");
packages/core/src/auth/store.ts
+3 -8
View File
@@ -7,8 +7,8 @@ import { describeAuthState, resolveModelBaseUrl } from "./resolver.ts";
const LOGOUT_KEYS = {
console: ["access_token"],
openapi: ["access_key_id", "access_key_secret"],
all: ["api_key", "access_token", "access_key_id", "access_key_secret"],
openapi: ["access_key_id", "access_key_secret", "security_token"],
all: ["api_key", "access_token", "access_key_id", "access_key_secret", "security_token"],
} as const;
/** 登录允许落盘的键:凭证本体 + 登录回调携带的连接/作用域字段。 */
@@ -45,8 +45,6 @@ export interface AuthStore {
logout(scope: "console" | "openapi" | "all"): Promise<boolean>;
/** 实际写入的 config.json 路径(不受命名配置影响,一直是同一个文件)。 */
path: string;
/** 当前命名配置名(`--config <name>` 解析后);未指定或 `default` 时为 undefined。 */
configName?: string;
}
export function makeAuthStore(sources: ResolutionSources): AuthStore {
@@ -58,7 +56,7 @@ export function makeAuthStore(sources: ResolutionSources): AuthStore {
return {
apiKey: !!file.api_key,
console: !!file.access_token,
openapi: !!(file.access_key_id || file.access_key_secret),
openapi: !!(file.access_key_id || file.access_key_secret || file.security_token),
baseUrl: file.base_url,
};
},
@@ -82,8 +80,5 @@ export function makeAuthStore(sources: ResolutionSources): AuthStore {
get path() {
return sources.configPath ?? getConfigPath();
},
get configName() {
return configName;
},
};
}
skills/bailian-cli/reference/auth.md
+4 -4
View File
@@ -86,10 +86,10 @@ bl auth login --open-api --access-key-id LTAIxxxxx --access-key-secret xxxxx
#### Flags
| Flag | Type | Required | Description |
| ------------ | ------ | -------- | ------------------------------------------------------------------- |
| `--console` | switch | no | Only clear the console access_token, keep api_key intact |
| `--open-api` | switch | no | Only clear OpenAPI AK/SK credentials, keep other credentials intact |
| Flag | Type | Required | Description |
| ------------ | ------ | -------- | ----------------------------------------------------------------------- |
| `--console` | switch | no | Only clear the console access_token, keep api_key intact |
| `--open-api` | switch | no | Only clear OpenAPI AK/SK/STS credentials, keep other credentials intact |
#### Examples
skills/bailian-cli/reference/config.md
+54 -6
View File
@@ -7,14 +7,38 @@ Index: [index.md](index.md)
## Commands in this group
| Command | Description |
| ---------------- | --------------------------------------------- |
| `bl config set` | Set a config value |
| `bl config show` | Display current configuration |
| `bl config ui` | Open a local web UI to manage config profiles |
| Command | Description |
| ---------------- | ------------------------------------------------ |
| `bl config list` | List config profiles and show the active profile |
| `bl config set` | Set a config value |
| `bl config show` | Display current configuration |
| `bl config ui` | Open a local web UI to manage config profiles |
| `bl config use` | Set the active config profile |
## Command details
### `bl config list`
| Field | Value |
| --------------- | ------------------------------------------------ |
| **Name** | `config list` |
| **Description** | List config profiles and show the active profile |
| **Usage** | `bl config list` |
#### Flags
_No command-specific flags._
#### Examples
```bash
bl config list
```
```bash
bl config list --output json
```
### `bl config set`
| Field | Value |
@@ -92,5 +116,29 @@ bl config ui --port 8787
```
```bash
bl config ui --config staging --no-open
bl config ui --no-open
```
### `bl config use`
| Field | Value |
| --------------- | ----------------------------- |
| **Name** | `config use` |
| **Description** | Set the active config profile |
| **Usage** | `bl config use --name <name>` |
#### Flags
| Flag | Type | Required | Description |
| --------------- | ------ | -------- | --------------------------------- |
| `--name <name>` | string | yes | Existing profile name, or default |
#### Examples
```bash
bl config use --name token-plan
```
```bash
bl config use --name default
```
skills/bailian-cli/reference/index.md
+13 -11
View File
@@ -18,9 +18,11 @@ Use this index for the full quick index and global flags.
| `bl auth logout` | Clear stored credentials | [auth.md](auth.md) |
| `bl auth status` | Show current authentication state | [auth.md](auth.md) |
| `bl bootstrap` | Initialize Bailian workspace and activate postpaid services | [bootstrap.md](bootstrap.md) |
| `bl config list` | List config profiles and show the active profile | [config.md](config.md) |
| `bl config set` | Set a config value | [config.md](config.md) |
| `bl config show` | Display current configuration | [config.md](config.md) |
| `bl config ui` | Open a local web UI to manage config profiles | [config.md](config.md) |
| `bl config use` | Set the active config profile | [config.md](config.md) |
| `bl console call` | Call a Bailian console API via the CLI gateway | [console.md](console.md) |
| `bl dataset delete` | Delete a dataset file by ID | [dataset.md](dataset.md) |
| `bl dataset get` | Get details of a single dataset file | [dataset.md](dataset.md) |
@@ -105,7 +107,7 @@ Use this index for the full quick index and global flags.
| `app` | `call`, `list` | [app.md](app.md) |
| `auth` | `generate-access-token`, `login`, `logout`, `status` | [auth.md](auth.md) |
| `bootstrap` | `(root)` | [bootstrap.md](bootstrap.md) |
| `config` | `set`, `show`, `ui` | [config.md](config.md) |
| `config` | `list`, `set`, `show`, `ui`, `use` | [config.md](config.md) |
| `console` | `call` | [console.md](console.md) |
| `dataset` | `delete`, `get`, `list`, `upload`, `validate` | [dataset.md](dataset.md) |
| `deploy` | `audio create`, `delete`, `get`, `image create`, `list`, `models`, `scale`, `text create`, `update` | [deploy.md](deploy.md) |
@@ -134,16 +136,16 @@ Use this index for the full quick index and global flags.
Available on every command (in addition to command-specific flags):
| Flag | Type | Required | Description |
| --------------------- | ------ | -------- | ----------------------------------- |
| `--output <format>` | string | no | Output format: text, json |
| `--timeout <seconds>` | number | no | Request timeout |
| `--quiet` | switch | no | Suppress non-essential output |
| `--verbose` | switch | no | Print HTTP request/response details |
| `--dry-run` | switch | no | Dry run mode |
| `--config <name>` | string | no | Use named config credentials |
| `--help` | switch | no | Show help |
| `--version` | switch | no | Print version |
| Flag | Type | Required | Description |
| --------------------- | ------ | -------- | ------------------------------------- |
| `--output <format>` | string | no | Output format: text, json |
| `--timeout <seconds>` | number | no | Request timeout |
| `--quiet` | switch | no | Suppress non-essential output |
| `--verbose` | switch | no | Print HTTP request/response details |
| `--dry-run` | switch | no | Dry run mode |
| `--config <name>` | string | no | Use a config profile for this command |
| `--help` | switch | no | Show help |
| `--version` | switch | no | Print version |
## Model auth flags